CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- interlogix comnav, carrier hills comnav firmware +1 moreHills ComNav Inadequate Encryption Strength6.2 Medium
- cisco iosCisco IOx Application Hosting Environment Vulnerabilities5.5 Medium
- codename065 download managerDownload Manager < 3.2.39 - Unauthenticated brute force of files master key7.5 High
- gnuboard gnuboard/gnuboard5, sir gnuboard +1 moreUse of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard58.2 High
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who...7.4 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreUse of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions...8.1 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Inadequate Encryption Strength7.5 High
- statamic cms, statamic +1 moreDiscoverability of user password hash in Statamic CMS3.7 Low
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +72 more +74 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...6.7 Medium
- argussurveillance dvrArgus Surveillance DVR v4.0 employs weak password encryption.5.5 Medium
- ibm mq, mq appliance +1 moreIBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that...5.1 Medium
- emerson openenterprise scada software, openenterprise scada server +1 moreICSA-20-140-02 Emerson OpenEnterprise6.5 Medium
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 moreThe DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may...7.8 High
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm6.5 Medium
- ibm maximo anywhereIBM Maximo Anywhere 7.6.4.0 could allow an attacker to reverse engineer the application due to...6.5 Medium
- valmet dnaRemote code execution in Valmet DNA before Collection 20218.8 High
- amazon aws software development kit, github.com/aws/aws-sdk-go github.com/aws/aws-sdk-go/service/s3/s3crypto +1 moreExposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go4.3 Medium
- schneider-electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +2 moreA CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted...7.5 High
- huawei emui, harmonyos +1 moreThe fingerprint module has a security risk of brute force cracking. Successful exploitation of...4.6 Medium
- apache kylinHardcoded credentials7.5 High
- typelevel jawnHash collision in typelevel jawn5.9 Medium
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART...6.8 Medium
- nicu micle simple jwt login, simple jwt login project jwt login +1 moreSimple JWT Login < 3.3.0 - Insecure Password Creation7.5 High
- netgear d7000 firmware, d8500 firmware, ex3700 firmware +18 more +20 moreCertain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62,...8.6 High
- netbsdIn NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.7.5 High
- dell wyse management suiteDell Wyse Management Suite version 3.3.1 and prior support insecure Transport Security Protocols...6.5 Medium
- anonaddyA Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.9.8 Critical
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic...5.9 Medium
- digi transport dr64 firmware, transport vc74 firmware, transport wr11 firmware +5 more +7 moreAn issue was discovered on Digi TransPort devices through 2021-07-21. An authenticated attacker...8.8 High
- gitlabAssuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some...6.2 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- ibm connect:direct web services, sterling connect\ +1 moreIBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic...5.9 Medium
- transloadit tusdotnetUse of Sha-1 in tusdotnet7.5 High
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic...3.7 Low
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic...4.4 Medium
- ibm security key lifecycle manager, security guardium key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash...4.4 Medium
- motorola binatone hubble cameras, binatoneglobal cn28 firmware, cn40 firmware +19 more +21 moreAn information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble...4.2 Medium
- enrocrypt project enrocryptUse of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py7.5 High
- hcltech traveler companion"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the...3.9 Low
- inhand networks ir615 router, inhandnetworks ir615 firmware +1 moreInHand Networks IR615 Router6.4 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected...5.9 Medium
- bosch rexroth indramotion mlc firmware, rexroth indramotion xlc firmware, rexroth indramotion mlc indramotion xlc +2 moreInformation disclosure8.6 High
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number...7.5 High
- riot-os riotIn RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component...5.5 Medium
- cyberark credential providerAn inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may...7.5 High
- cyberark credential providerThe effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1...4.4 Medium
- cyberark credential providerThe user identification mechanism used by CyberArk Credential Provider prior to 12.1 is...5.1 Medium
- fetchmail, fedoraproject fedora +1 moreFetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such...5.9 Medium
- sapphireimsIn SapphireIMS 4097_1, the password in the database is stored in Base64 format.7.5 High
- Show moreLoading…