Vulnerabilities > Cryptographic Issues

DATE CVE VULNERABILITY TITLE RISK
2019-09-03 CVE-2019-14261 Cryptographic Issues vulnerability in Abus Secvest Wireless Alarm System Fuaa50000 Firmware 3.01.01
An issue was discovered on ABUS Secvest FUAA50000 3.01.01 devices.
network
low complexity
abus CWE-310
7.5
2019-08-15 CVE-2018-14062 Cryptographic Issues vulnerability in Cospas-Sarsat System
The COSPAS-SARSAT protocol allows remote attackers to forge messages, replay encrypted messages, conduct denial of service attacks, and send private messages (unrelated to distress alerts) via a crafted 406 MHz digital signal.
network
low complexity
cospas-sarsat CWE-310
critical
9.1
2019-06-14 CVE-2018-5913 Cryptographic Issues vulnerability in Qualcomm products
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
local
low complexity
qualcomm CWE-310
7.8
2019-06-07 CVE-2018-6185 Cryptographic Issues vulnerability in Cloudera Manager and Navigator KEY Trustee KMS
In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and undelete API calls on encryption zone keys.
network
low complexity
cloudera CWE-310
4.9
2019-06-03 CVE-2017-14852 Cryptographic Issues vulnerability in Orpak Siteomat
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate.
network
low complexity
orpak CWE-310
critical
9.8
2019-05-14 CVE-2019-6576 Cryptographic Issues vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions).
network
low complexity
siemens CWE-310
7.5
2019-05-14 CVE-2019-9861 Cryptographic Issues vulnerability in Abus Secvest Wireless Alarm System Fuaa50000 Firmware 3.01.01
Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.
low complexity
abus CWE-310
8.1
2019-02-26 CVE-2019-9191 Cryptographic Issues vulnerability in Etsi Enterprise Transport Security
The ETSI Enterprise Transport Security (ETS, formerly known as eTLS) protocol does not provide per-session forward secrecy.
network
high complexity
etsi CWE-310
5.9
2019-02-06 CVE-2018-7839 Cryptographic Issues vulnerability in Schneider-Electric Iiot Monitor 3.1.38
A Cryptographic Issue (CWE-310) vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure.
local
low complexity
schneider-electric CWE-310
5.5
2019-01-18 CVE-2017-18160 Cryptographic Issues vulnerability in Qualcomm products
AGPS session failure in GNSS module due to cyphersuites are hardcoded and needed manual update everytime in snapdragon mobile and snapdragon wear in versions MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 835, SD 845, SD 850
network
low complexity
qualcomm CWE-310
critical
9.8