CWE-337: Predictable Seed in Pseudo-Random Number Generator (PRNG)
A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.
A kind of CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG).
From the CWE List. © The MITRE Corporation.
Newest
- smci mbd-x12spi Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token 3.1 Low
- flatpak xdg-desktop-portal XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key 8.3 High
- hewlett packard enterprise hpe nonstop modular nsj HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation 4.6 Medium
- asus router A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token... 7.7 High
- digital watchdog va1g4 recorder, vg4 recorder, vmax a1 g4 dvr +2 more +4 more Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups 7.6 High
- coredns, red hat advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 more CoreDNS Loop Detection Denial of Service Vulnerability 7.5 High
- pear pearweb PEAR Has a Predictable Verification Hash in Election Account Requests 8.2 High
- sakailms sakai Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl 5.9 Medium
- automationdirect click plus c0-0x cpu firmware, click plus c0-1x cpu firmware, click plus c2-x cpu firmware +2 more AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator 8.7 High
- No product listed Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX... 2.0 Low
- tigo energy cloud connect advanced Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect Advanced 8.7 High
- canonical juju JUJU_CONTEXT_ID is a predictable authentication secret 8.7 High
- cyber-domain-ontology cdo-utility-local-uuid, lfprojects case python utilities, cdo local uuid utility +2 more cdo-local-uuid vulnerable to insertion of artifact derived from developer's Present Working Directory into demonstration code 2.2 Low
- ubuntu budgie budgie extras budgie-extras vulnerabilities 6.0 Medium
- mitsubishi electric corporation melsec iq-f series fx5uc-32mr/ds-ts, melsec iq-f series fx5uc-32mt/d, melsec iq-f series fx5uc-32mt/ds-ts +117 more +119 more Authentication Bypass Vulnerability in Web Server Function on MELSEC Series 5.9 Medium
- enigmax project enigmax enigmaX Scrambling Table main.c getSeed prng seed 3.7 Low
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number... 8.1 High
- epignosishq efront A predictable seed vulnerability exists in the password reset functionality of Epignosis... 9.8 Critical