CWE-331: Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- unspecified phpservermon, phpservermonitor php server monitor +1 morephpservermon User.php generatePasswordResetToken predictable algorithm in random number generator2.6 Low
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC)...5.3 Medium
- zyxel gs1900 series firmware, gs1900-10hp firmware, gs1900-16 firmware +8 more +10 moreAn insufficient entropy vulnerability caused by the improper use of randomness sources with low...5.9 Medium
- dproxy-nexgen project dproxy-nexgendproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot...5.3 Medium
- totd project totdtotd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows...9.8 Critical
- apache openofficeApache OpenOffice Weak Master Keys8.8 High
- embedthis goaheadwebsda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation...9.8 Critical
- dell bsafe micro edition suite, bsafe crypto-c-micro-edition, bsafe micro-edition-suite +4 more +6 moreDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, ...5.3 Medium
- dell bsafe crypto-c micro edition, bsafe crypto-c-micro-edition, bsafe micro-edition-suite +1 more +3 moreDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, ...7.1 High
- openvpn access serverOpenVPN Access Server before 2.11 uses a weak random generator used to create user session token...7.5 High
- argoproj argo-cd, argo cd +1 moreInsecure entropy in argo-cd8.3 High
- broadcom ca automic automationCA Automic Automation 12.2 and 12.3 contain an entropy weakness vulnerability in the Automic...7.5 High
- siemens sinema remote connect serverA vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An...5.9 Medium
- schneider-electric software updateA CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from...3.8 Low
- dell emc unity operating environment, vnx control station +1 moreDell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass...9.8 Critical
- thales safenet authentication service, thalesgroup safenet windows logon agent +1 moreA user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to...7.2 High
- dell networking x-series, x1008 firmware, x1008p firmware +7 more +9 moreDell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass...7.5 High
- cyberark credential providerThe effective key space used to encrypt the cache in CyberArk Credential Provider prior to 12.1...4.4 Medium
- cyberark credential providerThe user identification mechanism used by CyberArk Credential Provider prior to 12.1 is...5.1 Medium
- hcc-embedded nichestack tcp\/ipThe DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the...7.5 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-331: Insufficient Entropy vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all...9.8 Critical
- sylabs singularitySylabs Singularity Enterprise through 1.6.2 has Insufficient Entropy in a nonce.9.8 Critical
- github.com/masterminds/goutils, goutils project goutils +1 moreInsufficient randomness in github.com/Masterminds/goutils9.1 Critical
- element-hq synapse, fedoraproject fedora +1 moreDenial of service in Matrix Synapse3.7 Low
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit...5.5 Medium
- rclone, fedoraproject fedora +1 moreUse of Cryptographically Weak Pseudo-Random Number Generator in Rclone7.5 High
parselnpmInsufficient Entropy in parselNo score- ufactory xarm5 lite, xarm 6 and xarm 7, xarm 5 lite firmware +1 moreRVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networks9.4 Critical
- mattermost serverMattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider9.1 Critical
- cypress psoc 4.2 bleThe Bluetooth Low Energy implementation in Cypress PSoC Creator BLE 4.2 component versions before...7.5 High
- domainmodreset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to...9.8 Critical
- otrs, otrs ag ((otrs)) community edition +1 moreSession / Password / Password token leak7.3 High
- juniper junosJunos: QFX Series: Insufficient entropy on QFX3500 and QFX3600 platforms when the system boots up6.5 Medium
- w1.fi hostapd, debian linux +1 morehostapd before 2.6, in EAP mode, makes calls to the rand() and random() standard library...7.5 High
- node-uuidInsecure Entropy Source - Math.random() in node-uuid7.5 High
- wolfsslwolfSSL and wolfCrypt 4.1.0 and earlier (formerly known as CyaSSL) generate biased DSA nonces....5.3 Medium
- cryptocatCryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness9.8 Critical
- fortinet fortiosAn Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1 and below for device not...7.5 High
- gnu gcc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple...7.5 High
- palletsprojects werkzeug, opensuse leap +1 morePallets Werkzeug Insufficient Entropy7.5 High
- dnnsoftware dotnetnukeInsufficient Entropy in DotNetNuke7.5 High
- dnnsoftware dotnetnukeInsufficient Entropy in DotNetNuke7.5 High
- sagemcom f\@st 5260 firmwareSagemcom F@st 5260 routers using firmware version 0.4.39, in WPA mode, default to using a PSK...5.3 Medium
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide...4.2 Medium
- cryptiles project cryptilesInsufficient Entropy in cryptiles9.8 Critical
- solarwinds serv-uSolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token...7.3 High
- unify openstage sip, openscape desk phone ip sip +1 moreThe web-based management (WBM) interface in Unify (former Siemens) OpenStage SIP and OpenScape...8.1 High
- cisco webex meetings serverCisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it...7.3 High
- loytec lvis-3me firmwareAn Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The...8.1 High
- netflix lemurLemur uses static IV per key7.5 High
- Show moreLoading…