CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- iofinnet tss-libCollision of hash values in github.com/bnb-chain/tss-lib9.1 Critical
- ibm spectrum controlIBM Spectrum Control information disclosure5.1 Medium
- click studios passwordstate, passwordstate browser extension chrome +1 moreClick Studios Passwordstate risky encryption1.9 Low
- sambaSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...9.8 Critical
- sick rfu650-10100 firmware, rfu650-10101 firmware, rfu650-10102 firmware +4 more +6 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a...6.5 Medium
- sick rfu630-04100 firmware, rfu630-04100s01 firmware, rfu630-04101 firmware +21 more +23 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a...6.5 Medium
- sick rfu620-10100 firmware, rfu620-10101 firmware, rfu620-10102 firmware +18 more +20 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a...6.5 Medium
- siemens ruggedcom rm1224 lte(4g) eu, ruggedcom rm1224 lte(4g) nam, ruggedcom rm1224 lte\(4g\) eu firmware +252 more +254 moreAffected devices use a weak encryption scheme to encrypt the debug zip file. This could allow an...7.1 High
- sick rfu610-10600 firmware, rfu610-10601 firmware, rfu610-10603 firmware +9 more +11 moreUse of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a...6.5 Medium
- ibm sterling secure proxyIBM Sterling Secure Proxy information disclosure5.9 Medium
- google androidIn decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing...5.5 Medium
- ibm cics txIBM CICS TX information disclosure5.9 Medium
- ibm cics txIBM CICS TX information disclosure5.9 Medium
- simplex chat, simplexmq +1 moreSimpleXMQ before 3.4.0, as used in SimpleX Chat before 4.2, does not apply a key derivation...5.3 Medium
- hcl software launch, hcltech hcl launch container image +1 moreHCL Launch container images may contain non-unique https certificates and database encryption key5.9 Medium
- sylabs sif, singularity image format +1 moreDigital Signature Hash Algorithms Not Validated in sylabs/sif6.3 Medium
- octopus serverIn affected versions of Octopus Server it was identified that the same encryption process was...5.3 Medium
- western digital wd discoveryWD Discovery's Use of Weak Hashing Algorithm for Code Signing5.3 Medium
- blink1 blink1control2Blink1Control2 uses weak password encryption7.5 High
- hirevue hiring platformHireVue Hiring Platform V1.0 suffers from Use of a Broken or Risky Cryptographic Algorithm.7.5 High
- rhonabwy project rhonabwyRhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryptio…7.5 High
- emerson openbsiEmerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering...5.5 Medium
- honeywell saia pg5 controls suiteSaia Burgess Controls (SBC) PCD through 2022-05-06 uses a Broken or Risky Cryptographic Algorithm...4.3 Medium
- motorolasolutions mdlcThe Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three...9.8 Critical
- emerson openbsiEmerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for...5.5 Medium
- emerson deltav distributed control system, deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware +22 more +24 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- linuxfoundation rocket chip generatorRocket-Chip commit 4f8114374d8824dfdec03f576a8cd68bebce4e56 was discovered to contain...9.1 Critical
- packback lti 1.3 tool library, packbackbooks lti-1-3-php-library +1 moreUse of a Broken or Risky Cryptographic Algorithm in packbackbooks/lti-1-3-php-library7.5 High
- packback lti 1.3 tool library, packbackbooks lti-1-3-php-library +1 moreAuthentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library7.5 High
- verizon lvskihp outdoorunit firmwareOn Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade...7.5 High
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak...6.7 Medium
- microsoft azure storage blobs client library for .net, azure storage blobs client library for java, azure storage blobs client library for python +4 more +6 moreAzure Storage Library Information Disclosure Vulnerability4.7 Medium
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytes5.3 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. A...8.1 High
- hewlett packard enterprise (hpe) hpe storeonce software, hpe storeonce 3640 firmware +1 moreA potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server...7.5 High
- broadcom sannavIn Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the...7.5 High
- mitsubishi ae-200a firmware, ae-200e firmware, ae-200j firmware +17 more +19 moreUse of a Broken or Risky Cryptographic Algorithm vulnerability in Air Conditioning System G-150AD...7.5 High
- verbatim executive fingerprint secure ssd firmware, fingerprint secure portable hard drive firmware, keypad secure usb 3.2 gen 1 firmware +1 more +3 moreAn issue was discovered in certain Verbatim drives through 2022-03-31. Due to the use of an...7.5 High
- javaez project javaezReversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ7.5 High
- jpadilla pyjwt, fedoraproject fedora +1 moreKey confusion through non-blocklisted public key formats in PyJWT7.4 High
- mck smartlock project smartlockDue to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers...6.8 Medium
- ibm cloud pak systemIBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic...5.9 Medium
- broadcom sannavBrocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm...6.5 Medium
- xwiki, xwiki xwiki-platform +1 moreCrypto script service uses hashing algorithm SHA1 with RSA for certificate signature in xwiki-platform5.4 Medium
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuite5.9 Medium
- google androidIn (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to...5.5 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- cisco umbrella secure web gateway, umbrella insights virtual appliance +1 moreCisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability4.1 Medium
- bulletproofs project bulletproofsThe Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation...8.1 High
- ibm security guardiumIBM Security Guardium 10.5 and 11.3 uses weaker than expected cryptographic algorithms that could...3.7 Low
- Show moreLoading…