cve.bz

CWE-342: Predictable Exact Value from Previous Values

Filter

An exact value or random number can be precisely predicted by observing previous values.

What the weakness is: CWE-342 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures

Ask an AI about CWE-342

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-342: Predictable Exact Value from Previous Values and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/342.html and https://cve.bz/cve/cwe/342?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-88778EPSS 0.7%

    Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; …

  2. 9.1CVE-2023-3373EPSS 1.0%

    Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 and prior and GOT SIMPLE Series GS21 model versions 01.49.000 and prior allows a remote unauthentica…

  3. 4.9CVE-2022-29930EPSS 0.9%

    SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1.

  4. 9.1CVE-2022-27577EPSS 1.4%

    The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trus…

  5. 5.3CVE-2020-28388EPSS 1.4%

    A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (A…

  6. 9.8CVE-2020-16226EPSS 2.3%

    Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.

  7. –CVE-2014-9196EPSS 2.5%

    Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by p…