CWE-330: Use of Insufficiently Random Values, page 5
Filter
The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.
What the weakness is: CWE-330 at MITRE
Ask an AI about CWE-330
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-330: Use of Insufficiently Random Values and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/330.html and https://cve.bz/cve/cwe/330?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 4.9CVE-2022-29330EPSS 0.9%
Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecified vectors.
- 6.5CVE-2022-34295EPSS 1.6%
totd before 1.5.3 does not properly randomize mesg IDs.
- 7.5CVE-2022-23138EPSS 1.0%
ZTE's MF297D product has cryptographic issues vulnerability. Due to the use of weak random values, the security of the device is reduced, and it may face the risk of attack.
- 3.3CVE-2022-32296EPSS 0.4%
The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.
- 7.5CVE-2022-30782EPSS 1.2%
Openmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide cryptographically secure random numbers.
- 4.9CVE-2022-29930EPSS 0.9%
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1.
- 6.5CVE-2022-30295EPSS 11%
uClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may lead to DNS cache poisoning. This is related to a reset of a value to 0x2.
- 7.5CVE-2022-26071EPSS 1.1%
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited …
- 4.8CVE-2021-41994EPSS 0.2%
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
- 4.8CVE-2021-41993EPSS 0.2%
A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
- 10.0CVE-2021-40422EPSS 6.2%
An authentication bypass vulnerability exists in the device password generation functionality of Swift Sensors Gateway SG3-1010. A specially-crafted network request can lead to remote code execution. An attacker can send a sequence of requ…
- 9.8CVE-2022-25752EPSS 1.5%
A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE X302-7 EEC (24V, coated), SCALANCE X302-7 EEC (2x 230V), SCALANCE X302-7 EEC (2x 230V, coated), SCAL…
- 9.1CVE-2022-27577EPSS 1.4%
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trus…
- 2.7CVE-2022-29035EPSS 0.6%
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations
- 9.1CVE-2022-26851EPSS 0.9%
Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to data loss.
- 7.5CVE-2022-22517EPSS 1.5%
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
- 7.5CVE-2022-28355EPSS 1.4%
randomUUID in Scala.js before 1.10.0 generates predictable values.
- 8.8CVE-2021-46010EPSS 1.2%
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations.
- 9.1CVE-2022-26320EPSS 1.0%
The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon imagePROGRAF and imageRUNNER devices through 2022-03-14, and potentially many other devices, generate…
- 6.5CVE-2022-26317EPSS 1.0%
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a completed Microflow execution call the affected framework does not correctly verify, if the request was ini…
- 5.3CVE-2022-22700EPSS 1.1%
CyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource, exposes the response header 'X-CFY-TX-TM'. In certain configurations, that response header contains different, predictable value ranges which can be…
- 9.8CVE-2021-36166EPSS 1.5%
An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of the observation of certain system's properties.
- 7.4CVE-2021-20322EPSS 6.9%
A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectiv…
- 9.8CVE-2022-22922EPSS 1.3%
TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.
- 8.8CVE-2021-26726EPSS 1.1%
A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 20…
- 9.8CVE-2021-36294EPSS 1.6%
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user.
- 9.1CVE-2022-23408EPSS 1.4%
wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects connections (without AEAD) using AES-CBC or DES3 with TLS 1.1 or 1.2 or DTLS 1.1 or 1.2. This occurs because of misplaced memory initialization in Build…
- 7.5CVE-2021-45458EPSS 2.1%
Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords. In the encryption algorithm used by this encryption class, the cipher is initialized with a hardcoded key and IV. If users use cl…
- 7.5CVE-2021-24998EPSS 1.2%
The Simple JWT Login WordPress plugin before 3.3.0 can be used to create new WordPress user accounts with a randomly generated password. The password is generated using the str_shuffle PHP function that "does not generate cryptographicall…
- 7.5CVE-2021-45488EPSS 1.0%
In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.
- 7.5CVE-2021-45487EPSS 1.0%
In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.
- 7.5CVE-2021-44151EPSS 2.6%
An issue was discovered in Reprise RLM 14.2. As the session cookies are small, an attacker can hijack any existing sessions by bruteforcing the 4 hex-character session cookie on the Windows version (the Linux version appears to have 8 char…
- 9.8CVE-2021-41694EPSS 1.3%
An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.
- 6.1CVE-2021-38377EPSS 1.2%
OX App Suite through 7.10.5 allows XSS via JavaScript code in an anchor HTML comment within truncated e-mail, because there is a predictable UUID with HTML transformation results.
- 7.2CVE-2021-22968EPSS 3.2%
A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concrete5) versions 8.5.6 and below.The external file upload feature stages files in the public directory e…
- 7.5CVE-2021-26322EPSS 1.0%
Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.
- 9.8CVE-2021-28024EPSS 1.4%
Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.
- 8.8CVE-2021-22038EPSS 1.0%
On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized an…
- 7.5CVE-2021-41829EPSS 3.2%
Zoho ManageEngine Remote Access Plus before 10.1.2121.1 relies on the application's build number to calculate a certain encryption key.
- 5.5CVE-2021-41061EPSS 0.2%
In RIOT-OS 2021.01, nonce reuse in 802.15.4 encryption in the ieee820154_security component allows attackers to break encryption by triggering reboots.
- 5.4CVE-2021-37186EPSS 0.4%
A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versions < V4.0.9), SIMATIC RTU3030C (All versions < V4.0.9), SIMATIC RTU3031C (All versions < V4.0.9), …
- 9.8CVE-2021-34646ExploitEPSS 51%
Versions up to, and including, 5.4.3, of the Booster for WooCommerce WordPress plugin are vulnerable to authentication bypass via the process_email_verification function due to a random token generation weakness in the reset_and_mail_activ…
- 9.1CVE-2020-35685EPSS 2.1%
An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attacker may be able to determine the ISN of c…
- 7.5CVE-2021-31228EPSS 1.3%
An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's r…
- 5.5CVE-2021-0417EPSS 0.1%
In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pat…
- 6.1CVE-2021-39249EPSS 0.8%
Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function.
- 9.8CVE-2021-38606EPSS 1.2%
reNgine through 0.5 relies on a predictable directory name.
- 5.3CVE-2021-3692EPSS 1.7%
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
- 7.5CVE-2021-3689EPSS 1.9%
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
- 5.5CVE-2021-25444EPSS 0.8%
An IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileged process.