CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- trendmakers sight bulb pro firmware zj cg32-2201TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm6.8 Medium
- sick field analyticsDeprecated TLS version supported6.5 Medium
- open-quantum-safe liboqsliboqs affected by theoretical design flaw in HQC3.7 Low
- tridium niagara, niagara enterprise security, niagara framework +2 moreMissing Cryptographic Step6.8 Medium
- siemens sirius 3rk3 modular safety system (mss), sirius safety relays 3sk2 +1 moreA vulnerability has been identified in SIRIUS 3RK3 Modular Safety System (MSS) (All versions),...8.7 High
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- best practical solutions request trackerDeprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME2.3 Low
- wiesemann & theis com-server 20ma, com-server oem, com-server poe 3x isolated +2 more +4 moreCom-Server Exposed via Weak TLS9.1 Critical
- hcl software sx, hcltech hcl sx +1 moreHCL SX is affected by usage of a weak cryptographic algorithm6.5 Medium
- saviynt ova based connectImproper Authorization in the installer for the EOL OVA based connect component6.1 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure5.9 Medium
- ibm aspera consoleIBM Aspera Console information disclosure5.9 Medium
- netis wf-2404Netis WF-2404 passwd weak hash1.0 Low
- ibm spss statisticsIBM SPSS Statistics information disclosure5.9 Medium
- file away project away, thomstark file away +1 moreFile Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read7.5 High
- beta80 life 1stUse of a Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient...6.0 Medium
- ibm qradar edr, security qradar edr +1 moreIBM QRadar EDR information disclosure5.9 Medium
- zte link, mu5120 +1 moreZTELink has a configuration defect vulnerability4.2 Medium
- nationalsecurityagency emissaryEmissary Use of a Broken or Risky Cryptographic Algorithm7.5 High
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure5.9 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav OVA SSH port 228.2 High
- broadcom brocade sannav, brocade sannav +1 moreWeak TLS Ciphers on Brocade SANnav port 443 & 180826.9 Medium
- audiocodes mediant session border controllerAn issue was discovered in AudioCodes Mediant Session Border Controller (SBC) before 7.40A.501...7.5 High
- No product listedAn issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W...5.7 Medium
- ibm applinxIBM ApplinX Information Disclosure5.9 Medium
- dell powerprotect dd, data domain operating system +1 moreDell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of...3.7 Low
- emote interactive remote mouse serverEmote Interactive Remote Mouse Server command injection due to weak encoding9.8 Critical
- ibm mq operator, supplied mq advanced container images +1 moreIBM MQ Operator information disclosure5.9 Medium
- ibm storage protect backup-archive client, storage protect for virtual environments: data protection for vmware, storage protect +1 more +3 moreIBM Storage Protect for Virtual Environments: Data Protection for VMware information disclosure5.9 Medium
- No product listedIn illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition...6.1 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums deterministic firmware encryption key7.7 High
- hcltech devops velocity, ibm urbancode velocity +1 moreIBM UrbanCode Velocity information disclosure5.9 Medium
- b&r industrial automation automation runtime, mapp view +1 moreA “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used...8.2 High
- ibm robotic process automationIBM Robotic Process Automation information disclosure5.9 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- ibm engineering lifecycle optimization publishingIBM Engineering Lifecycle Optimization - Publishing information disclosure5.9 Medium
- smadar spsSmadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm8.4 High
- acronis cyber protect 16, cyber protect cloud agent +1 moreWeak algorithm used to sign RPM package. The following products are affected: Acronis Cyber...2.5 Low
- dell recoverpoint for virtual machinesDell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic...6.5 Medium
- beegoBeego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames6.9 Medium
- espressif esp-idfAES/CBC Constant IV Vulnerability in ESPTouch v26.6 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure2.5 Low
cookie-encrypternpmBit flip attack vulnerability in cookie-encrypter9.1 Critical- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreMD5 bypass operation8.8 High
- ibm cognos controllerIBM Cognos Controller information disclosure5.9 Medium
- drakkan sftpgoBrute force takeover of OpenID Connect session cookies in sftpgo5.3 Medium
- broadcom brocade sannav, brocade sannav +1 moreWeak Key-exchange algorithms6.5 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user...6.3 Medium
- 63moons wave 2.0, aero +1 moreSensitive Information Disclosure Vulnerability in Wave 2.07.1 High
- Show moreLoading…