CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- psypraxAn issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored...7.5 High
- jetbrains ktorIn JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.5.3 Medium
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware +27 more +29 moreAn issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...7.5 High
- ietf public key cryptography standards \#1, st stm32cubef0, stm32cubef1 +19 more +21 moreBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library...5.9 Medium
- microchip libraries for applications, ietf public key cryptography standards \#1 +1 moreBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications...5.9 Medium
- dnsmasq, arista eos, debian linux +1 more +3 moreA flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query,...3.7 Low
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium data encryptionIBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic...5.9 Medium
- 1c 1c\The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the...7.5 High
- aes encryption project encryptionThe AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from...7.5 High
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below....7.5 High
- tlsfuzzer tlslite-ngRSA vulnerability in tslite-ng7.5 High
- os4ed opensisOpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file...7.5 High
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...7.5 High
- schneider-electric modicon m221 firmwareA CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references,...7.3 High
- aviatrix controllerAn issue was discovered in Aviatrix Controller before R6.0.2483. Multiple executable files, that...7.5 High
- untangle firewall ngUntangle Firewall NG before 16.0 uses MD5 for passwords.5.3 Medium
- intel converged security and manageability engineInadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30...4.6 Medium
- huawei fusioncomputeFusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with...4.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed...6.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels...6.5 Medium
aws-encryption-sdk-cliPyPICLI does not correctly implement strict modeNo score- konzept-ix publixoneA hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020...6.5 Medium
- cisco firepower management center, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability8.1 High
- ibm curam social program management, curam spm +1 moreIBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a...5.9 Medium
- php, canonical ubuntu linux, debian linux +5 more +7 moreWrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV5.4 Medium
- cpanelcPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561).7.5 High
- wibu codemeterProtocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected,...9.8 Critical
- elkarbackupA Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker...7.5 High
- linux4sam at91bootstrapAT91bootstrap before 3.9.2 does not properly wipe encryption and authentication keys from memory...9.1 Critical
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreRaccoon attack3.7 Low
- google androidIn various functions in fscrypt_ice.c and related files in some implementations of f2fs...4.4 Medium
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIn BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12...5.9 Medium
- ncr aptra xfs, selfserv atm +1 moreNCR SelfServ ATMs running APTRA XFS 04.02.01 and 05.01.00 implement 512-bit RSA certificates to...7.6 High
- grandstream ht801 firmware, ht802 firmware, ht812 firmware +3 more +5 moreGrandstream HT800 series firmware version 1.0.17.5 and below contain a backdoor in the SSH...8.8 High
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.9 Medium
- palo alto networks pan-osPAN-OS: TLS 1.0 usage for certain communications with Palo Alto Networks cloud delivered services4.8 Medium
- hcltech domino"A vulnerability in the TLS protocol implementation of the Domino server could allow an...5.9 Medium
- wolfsslThe private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular...5.3 Medium
- easyrobotics er-flex firmware, er-lite firmware, er-one firmware +8 more +10 moreRVD#2565: Weak token generation for the REST API.9.8 Critical
- intel converged security management engine firmwareReversible one-way hash in Intel(R) CSME versions before 11.8.76, 11.12.77 and 11.22.77 may allow...6.7 Medium
- geovision door access control device, usavisionsys geovision gv-as1010 firmware, geovision gv-as210 firmware +3 more +5 moreGeoVision Door Access Control Device - Shared cryptographic keys5.9 Medium
- ciphermail gateway, webmail messenger +1 moreAn issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional...5.9 Medium
- dlink dir-865l firmwareD-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength.7.5 High
- yawsyaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by...5.5 Medium
- oracle iplanet web server** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP...9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP...9.1 Critical
- Show moreLoading…