CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- linecorp lineThe leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send...6.5 Medium
- linecorp lineThe leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to...6.5 Medium
- linecorp lineThe leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send...6.5 Medium
- linecorp lineThe leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send...6.5 Medium
- espressif esptoolesptool allows attackers to view sensitive information via weak cryptographic algorithm7.5 High
- softing smartlink sw-htWeak ciphers vulnerability in Softing smartLink SW-HT5.9 Medium
- dbcli myclimycli has Inadequate Encryption Strength7.5 High
- ixpdata easyinstallAn issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated...7.8 High
- eaton easye4, easy-box-e4-ac1 firmware, easy-box-e4-dc1 firmware +20 more +22 moreWeak encoding vulnerability in easyE46.8 Medium
- dell data protection centralDell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength...5.9 Medium
- huawei emui, harmonyos +1 moreVulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS...7.5 High
- stormshield ssl vpn clientAn issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are...5.3 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.1 High
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server5.5 Medium
- mitsubishi electric got2000 series gt27 model, mitsubishi electric corporation got simple series gs25 model, gt designer3 version1 (got2000) +12 more +14 moreWeak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27...7.5 High
- hcl bigfix webuiBigFix WebUI is vulnerable to use of a risky cryptographic algorithm5.9 Medium
- cisco nx-os system software in aci mode, nx-os +1 moreA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000...7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Remote Desktop Protocol Security Feature Bypass6.8 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +19 more +21 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM...5.9 Medium
- ami megarac sp-x, megarac spx +1 moreInadequate Encryption Strength7.6 High
- google androidIn updatePictureInPictureMode of ActivityRecord.java, there is a possible bypass of background...7.8 High
- google androidIn openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying...5.5 Medium
- zoom, zoom communications inc. clients, zoom meetings +7 more +9 moreExposure of information intended to be encrypted by some Zoom clients may lead to disclosure of...5.3 Medium
- mediawikiAn issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it...5.3 Medium
- alerton bcm-web, honeywell alerton bcm-web firmware +1 more** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an...8.3 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.4. An app...8.6 High
- marvalglobal msmMarval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains...5.5 Medium
- kyvernoKyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites9.3 Critical
- briarproject briarBramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can...5.9 Medium
- acronis cyber protect 15, cyber protect +1 moreTLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15...5.3 Medium
- dgraphDgraph Audit Log Encryption nonce reuse3.3 Low
- canon ij network tool, canon inc. ij nw tool +1 moreCanon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool...6.5 Medium
- codesys development system v3CODESYS V3 prone to Inadequate Encryption Stregth7.7 High
- rockwell automation thinmanagerRockwell Automation ThinManager product allows the use of medium strength ciphers. If the...7.5 High
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard...7.5 High
- hashicorp vault, vault enterprise +1 moreVault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM2.5 Low
- google androidIn multiple places of AccessibilityService, there is a possible way to hide the app from the user...7.8 High
- ui desktopImproper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier)...5.5 Medium
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Easily calculated password7.5 High
- mozilla firefox, firefox for android, focus +2 more +4 moreUnder certain circumstances, a call to the <code>bind</code> function may have resulted in the...6.5 Medium
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +23 more +25 moreA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE...6.7 Medium
- contec co.,ltd. conprosys iot gateway products, contec cps-mc341-a1-111 firmware, cps-mc341-adsc1-111 firmware +17 more +19 moreInadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote...7.2 High
- apache linkisApache Linkis gateway module token authentication bypass9.1 Critical
- adobe experience manager, experience manager cloud service +1 moreAEM Weak Cryptography for Passwords Security feature bypass5.3 Medium
- rocket.chatAn improper access control vulnerability exists prior to v6 that could allow an attacker to break...7.5 High
- fujifilm driver distributorDriver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a...7.5 High
- dell powerscale onefsDell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A...6.0 Medium
- dell supportassist for business pcs, supportassist for home pcs, supportassist client consumer +2 moreSupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version...5.5 Medium
- samsung flow, samsung mobile flow for pc +1 moreImproper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers...7.5 High
- samsung flow, samsung mobile flow for android +1 moreImproper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows...7.5 High
- Show moreLoading…