CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- opensource-socialnetwork open source social networkAn issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file...5.9 Medium
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than...9.1 Critical
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak...7.5 High
- moxa pt-7528-12msc-12tx-4gsfp-hv-hv firmware, pt-7528-12msc-12tx-4gsfp-hv firmware, pt-7528-12msc-12tx-4gsfp-wv-wv firmware +52 more +54 moreIn Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9...7.5 High
- ibm api connectIBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms...5.9 Medium
- inextrix astppAn issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config...7.5 High
- comba ap2600-i - a02 - 0202n00pd2 firmwareComba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure...7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...7.5 High
- apache wss4j, red hat jbossws, apache cxf +8 more +10 moreUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J5.9 Medium
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...6.2 Medium
- wago e!cockpit, e\!cockpit +1 moreA hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e...5.5 Medium
- wago pfc100 firmware, pfc200 firmware +1 moreAn exploitable timing discrepancy vulnerability exists in the authentication functionality of the...5.3 Medium
- siemens sinvr/sivms video server, sinvr\/sivms video server +1 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...7.5 High
- squirrelmail, squirrelmail change passwd +1 moreSquirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords.7.5 High
- ibm cloud cliIBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An...5.9 Medium
- kde paste appletThe KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C...5.5 Medium
- ibm security directory serverIBM Security Directory Server 6.4.0 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- apereo opencastOpencast stores passwords using outdated MD5 hash algorithm7.7 High
- ibm security secret serverIBM Security Secret Server 10.7 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- suse yast2-security, opensuse factory +1 moreyast: Fallback to DES without configuration in /etc/login.def2.9 Low
- taskautomation carbonftpCarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption...5.5 Medium
- canonical python-aptpython-apt uses MD5 for validation4.7 Medium
- mitel sip-dect firmwareAn encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an...5.9 Medium
- huawei cloudengine 12800 firmware, s5700 firmware, s6700 firmware +2 moreHuawei products CloudEngine 12800, S5700, and S6700 have a weak algorithm vulnerability. The...5.3 Medium
- huawei honor magic2, honor magic2 firmware +1 moreHuawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an...4.4 Medium
- http authentication library project authentication libraryThe HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the...7.5 High
- wolfsslwolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in...7.5 High
- ibm api connectIBM API Connect 2018.4.1.7 uses weaker than expected cryptographic algorithms that could allow an...5.9 Medium
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have incorrect Credentials Management....8.1 High
- huawei s12700 firmware, s1700 firmware, s2700 firmware +4 more +6 moreThere is a weak algorithm vulnerability in some Huawei products. The affected products use weak...7.5 High
- siemens control center server (ccs), sinvr/sivms video server, sinvr 3 central control server +1 more +3 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...5.5 Medium
- intesync solismedAn issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation...5.9 Medium
- shadowsocks shadowsocks-libev, opensuse backports, leap +2 moreAn exploitable denial-of-service vulnerability exists in the UDPRelay functionality of...5.9 Medium
- hashicorp terraformUse of a Broken or Risky Cryptographic Algorithm in Terraform7.5 High
- st st33tphf20i2c firmware, st33tphf20spi firmware, st33tphf2ei2c firmware +1 more +3 moreSTMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the...5.9 Medium
- broadcom brocade sannav, brocade sannav +1 morePassword-based encryption (PBE) algorithm, of Brocade SANnav versions before v2.0, has a weakness...7.5 High
- ready wireless emergency alertsThe Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential...5.3 Medium
- ibm cloud orchestratorIBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected...5.9 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20034 and earlier; 2019.012.20035 and earlier versions...9.8 Critical
- google androidOn certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture...4.6 Medium
- streebog project streebogIncorrect implementation in streebog7.5 High
- streebog project streebogIncorrect implementation of the Streebog hash functions in streebog7.5 High
- matrixsslMatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This...5.9 Medium
- enterprisedt completeftp serverEnterpriseDT CompleteFTP Server prior to version 12.1.3 is vulnerable to information exposure in...4.3 Medium
- qualcomm, inc. snapdragon auto, snapdragon mobile, snapdragon wearables, qualcomm mdm9607 firmware, msm8909w firmware +16 more +18 moreBoot image not getting verified by AVB in Snapdragon Auto, Snapdragon Mobile, Snapdragon...7.8 High
- dell integrated data protection appliance, emc integrated data protection appliance firmware +1 moreDell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage...8.2 High
- google androidThe Print Service is susceptible to man in the middle attacks due to improperly used crypto. This...5.9 Medium
- gradleUse of a weak cryptographic algorithm in Gradle5.9 Medium
- opensslPadding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey3.7 Low
- totaljs total.js cmsAn issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple...6.5 Medium
- Show moreLoading…