CWE-334: Small Space of Random Values
The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- yealink avhub, meetingbar a10, meetingbar a40 +5 more +7 more In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8... 7.4 High
- brix crypto-js crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain 9.0 Critical
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +60 more +62 more A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC... 6.9 Medium
- jan syski megabip Low token entropy in MegaBIP 9.1 Critical
- red hat enterprise linux 7, enterprise linux 8, enterprise linux 9 +1 more +3 more Avahi: avahi wide-area dns predictable transaction ids 5.3 Medium
-
sharkscrates.io Sharks has a Bias of Polynomial Coefficients in Secret Sharing 6.0 Medium - blackberry secusuite Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE 4.8 Medium
- journyx, journyx (jtime) +1 more Journyx Unauthenticated Password Reset Bruteforce 8.8 High
- dji matrice 300, matrice m30, mavic 3 +4 more +6 more A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI... 6.6 Medium
- etsi tetra standard, midnightblue tetra\ +1 more Intentionally weakened effective strength in TETRA TEA1 8.8 High
- moxa mxsecurity, mxsecurity series +1 more MXsecurity Authentication Bypass 9.8 Critical
- atlas copco power focus, atlascopco power focus 6000 firmware +1 more CVE-2023-1898 9.4 Critical
- cisco firepower management center, secure firewall management center +1 more A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC)... 5.3 Medium
- samsung find my mobile, samsung mobile findmymobile +1 more Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker... 5.3 Medium
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more Communication Components in multiple CODESYS products vulnerable to communication channel disruption 7.5 High
- anker eufy homebase 2 firmware An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of... 7.7 High
- schneider-electric modicon m221 firmware A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all... 7.3 High