CWE-327: Use of a Broken or Risky Cryptographic Algorithm, page 15
Filter
The product uses a broken or risky cryptographic algorithm or protocol.
What the weakness is: CWE-327 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures
Related attack patterns (CAPEC): 7
- CAPEC-20 Encryption Brute Forcing Likelihood: Low · Severity: Low
- CAPEC-97 Cryptanalysis Likelihood: Low · Severity: Very High
- CAPEC-459 Creating a Rogue Certification Authority Certificate Likelihood: Medium · Severity: Very High
- CAPEC-473 Signature Spoof
- CAPEC-475 Signature Spoofing by Improper Validation Likelihood: Low · Severity: High
- CAPEC-608 Cryptanalysis of Cellular Encryption Severity: High
- CAPEC-614 Rooting SIM Cards Severity: High
The attack patterns MITRE's CAPEC relates to CWE-327, as MITRE names them. Credits.
Ask an AI about CWE-327
Show the prompt
Explain CWE-327: Use of a Broken or Risky Cryptographic Algorithm and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/327.html and https://cve.bz/cve/cwe/327?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.8CVE-2017-9466EPSS 0.5%
The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write acces…
- 7.5CVE-2016-3099EPSS 1.8%
mod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to force the use of ciphers that were not intended to …
- 9.8CVE-2014-8687ExploitEPSS 44%
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens.
- 9.8CVE-2017-4917EPSS 0.8%
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained.
- 8.5CVE-2017-5243EPSS 0.5%
The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key exchange and other important functions. As a result, it falls back to allowing ALL algorithms supporte…
- 7.5CVE-2017-9136EPSS 0.8%
An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can d…
- 7.5CVE-2017-5186EPSS 0.6%
Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a comm…
- 7.5CVE-2016-6485EPSS 0.8%
The __construct function in Framework/Encryption/Crypt.php in Magento 2 uses the PHP rand function to generate a random number for the initialization vector, which makes it easier for remote attackers to defeat cryptographic protection mec…
- 7.5CVE-2016-8370EPSS 1.3%
An issue was discovered in Mitsubishi Electric Automation MELSEC-Q series Ethernet interface modules QJ71E71-100, all versions, QJ71E71-B5, all versions, and QJ71E71-B2, all versions. Weakly encrypted passwords are transmitted to a MELSEC-…
- 9.8CVE-2016-6602ExploitEPSS 56%
ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtain cleartext passwords by leveraging access to WEB-INF/conf/securitydbData.xml. NOTE: this issue ca…
- 5.9CVE-2005-4900EPSS 0.9%
SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for refer…
- 7.5CVE-2016-0923EPSS 1.6%
The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before 4.1.5 places the weakest algorithms first in a signature-algorithm list transmitted to a server, which makes it easier for remote attackers to defeat…
- 7.5CVE-2015-0535EPSS 1.1%
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly restrict TLS state transitions, which makes it easier for remote attackers to conduct cipher-downgrade …
- 7.5CVE-2015-0533EPSS 0.8%
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting t…
- 3.7CVE-2015-2808EPSS 74%
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against t…
- –CVE-2007-6755EPSS 1.6%
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, which might allow conte…
- 5.9CVE-2013-2566ExploitEPSS 84%
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sess…
- –CVE-2009-2273EPSS 0.7%
The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
- 4.4CVE-2008-3775EPSS 0.2%
Folder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive information by reading and decrypting the QualityControl\_pack registry value.
- 7.5CVE-2008-3188EPSS 1.5%
libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for attackers to conduct brute-force attacks against hashed passwords.
- 9.8CVE-2007-6013EPSS 3.3%
Wordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash, which allows attackers to bypass authentication by obtaining the MD5 hash from the user database, then generating the authentication cookie from t…
- 4.6CVE-2007-5460EPSS 2.2%
Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attac…
- 7.5CVE-2007-4150EPSS 1.0%
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storin…
- 7.8CVE-2005-4860EPSS 0.2%
Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.
- 7.5CVE-2005-2946EPSS 0.8%
The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authori…
- 7.5CVE-2002-2058EPSS 0.9%
TeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt, which allows remote attackers to identify IP's visiting the site by dividing each octet by the MD5 hash of '20'.
- –CVE-1999-0007EPSS 8.5%
Information from SSL-encrypted sessions via PKCS #1.