CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm...7.5 High
- gnuboard gnuboard/gnuboard5, sir gnuboard +1 moreUse of a Broken or Risky Cryptographic Algorithm in gnuboard/gnuboard58.2 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote...8.1 High
- fortinet fortiwanA use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel...6.5 Medium
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Use of a Broken or Risky Cryptographic Algorithm7.5 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic...5.9 Medium
- golang ssh, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moregolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 High
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreThe use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup,...8.1 High
- hcltech bigfix compliance"TLS-RSA cipher suites are not disabled in BigFix Compliance up to v2.0.5. If TLS 2.0 and secure...7.5 High
- fujifilm apeosport-iv 2060 firmware, apeosport-iv 3060 firmware, apeosport-iv 3065 firmware +157 more +159 moreA risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker...4.9 Medium
- thimpress learnpressLearnPress < 4.1.5 - Arbitrary Image Renaming4.3 Medium
- linux kernel, netapp bootstrap os, cloud volumes ontap mediator +14 more +16 moreAn issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method...5.9 Medium
- cobbler project cobblerAn issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol...5.9 Medium
- ceph, redhat ceph storage, fedoraproject fedora +5 more +7 moreA key length flaw was found in Red Hat Ceph Storage. An attacker can exploit the fact that the...6.5 Medium
- airspan networks mmp, ptmp c-series and a5x, ptp c-series +5 more +7 moreAirspan Networks Mimosa Use of a Broken or Risky Cryptographic Algorithm6.5 Medium
- sierra designs z-wave, silabs zgm130s037hgn firmware, zgm2305a27hgn firmware +3 more +5 moreZ-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a...8.3 High
- moxa tn-5900 firmwareThe firmware on Moxa TN-5900 devices through 3.1 has a weak algorithm that allows an attacker to...7.5 High
- fresenius-kabi agilia connect, fresenius kabi agilia link+, fresenius-kabi agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm7.3 High
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia link\+ firmware +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm6.5 Medium
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm5.9 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than...4.8 Medium
- huawei emui, harmonyos +1 moreThe fingerprint module has a security risk of brute force cracking. Successful exploitation of...4.6 Medium
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic...5.9 Medium
- apache jamesApache James vulnerable to STARTTLS command injection (IMAP and POP3)5.9 Medium
- foxcpp maddyUse of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy7.5 High
- philips efficia cm series, patient information center ix (pic ix), patient information center ix +1 more +3 morePhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of a Broken or Risky Cryptographic Algorithm5.9 Medium
- netgear d7000 firmware, d8500 firmware, ex3700 firmware +18 more +20 moreCertain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62,...8.6 High
- linux kernel, netapp aff a400 firmware, all flash fabric-attached storage 8300 firmware +23 more +25 moreIn the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an...7.5 High
- linux kernel, oracle communications cloud native core binding support function, communications cloud native core network exposure function +1 more +3 moreIn the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information...3.5 Low
- netbsdIn NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic...7.5 High
- netbsdIn NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.7.5 High
- myscada mypromySCADA myPRO7.5 High
- apple remote desktopA cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was...7.5 High
- arm mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption...7.5 High
- trustedfirmware mbed tls, fedoraproject fedora +1 moreIn Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt...7.5 High
- anonaddyA Broken or Risky Cryptographic Algorithm exists in AnonAddy 0.8.5 via VerificationController.php.9.8 Critical
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic...5.9 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...5.9 Medium
- fortinet fortiadc, fortimail, fortisandbox +1 more +3 moreA missing cryptographic steps vulnerability in the function that encrypts users' LDAP and RADIUS...5.3 Medium
- gitlabAssuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some...6.2 Medium
- huawei ips module firmware, ngfw module firmware, secospace usg6300 firmware +3 more +5 moreThere is a weak secure algorithm vulnerability in Huawei products. A weak secure algorithm is...5.9 Medium
- transloadit tusdotnetUse of Sha-1 in tusdotnet7.5 High
- edgexfoundry app-functions-sdk-go, edgex foundry, app service configurable +1 more +3 moreBroken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors5.4 Medium
- discourse rails multisiteSecure/signed cookies share secrets between sites in rails_multisite8.3 High
- enrocrypt project enrocryptUse of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py7.5 High
- hcltech traveler companion"HCL Traveler Companion is vulnerable to an iOS weak cryptographic process vulnerability via the...3.9 Low
- reddit snudownHash-Collision Denial-of-Service Vulnerability in snudown6.5 Medium
- juniper networks src series, juniper session and resource control +1 moreSRC Series: NETCONF over SSH allows negotiation of weak ciphers5.3 Medium
- dell isilon insightiq, isilon insightiq firmware +1 moreDell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH...8.1 High
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 uses weaker than...5.9 Medium
- Show moreLoading…