Vulnerabilities > Cryptographic Issues

DATE CVE VULNERABILITY TITLE RISK
2019-06-14 CVE-2018-5913 Cryptographic Issues vulnerability in Qualcomm products
A non-time constant function memcmp is used which creates a side channel that could leak information in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS405, QCS605, Qualcomm 215, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 439 / SD 429, SD 450, SD 615/16/SD 415, SD 625, SD 632, SD 636, SD 650/52, SD 675, SD 712 / SD 710 / SD 670, SD 730, SD 820, SD 820A, SD 835, SD 845 / SD 850, SD 855, SD 8CX, SDA660, SDM439, SDM630, SDM660, Snapdragon_High_Med_2016, SXR1130
local
low complexity
qualcomm CWE-310
7.2
2019-06-13 CVE-2019-12813 Cryptographic Issues vulnerability in Crossmatch Digital Persona U.Are.U 4500 Firmware 24
An issue was discovered in Digital Persona U.are.U 4500 Fingerprint Reader v24.
4.3
2019-06-07 CVE-2018-6185 Cryptographic Issues vulnerability in Cloudera Manager and Navigator KEY Trustee KMS
In Cloudera Navigator Key Trustee KMS 5.12 and 5.13, incorrect default ACL values allow remote access to purge and undelete API calls on encryption zone keys.
network
low complexity
cloudera CWE-310
5.5
2019-06-06 CVE-2019-7311 Cryptographic Issues vulnerability in Linksys Wrt1900Acs Firmware 1.0.3.187766
An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices.
local
low complexity
linksys CWE-310
7.2
2019-06-05 CVE-2019-11946 Cryptographic Issues vulnerability in HP Intelligent Management Center
A remote credential disclosure vulnerability was identified in HPE Intelligent Management Center (IMC) PLAT earlier than version 7.3 E0506P09.
network
low complexity
hp CWE-310
6.8
2019-06-03 CVE-2017-14852 Cryptographic Issues vulnerability in Orpak Siteomat
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate.
network
low complexity
orpak CWE-310
5.0
2019-05-14 CVE-2019-6576 Cryptographic Issues vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1 Update 1), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V15.1 Update 1), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Advanced (All versions < V15.1 Update 1), SIMATIC WinCC Runtime Professional (All versions < V15.1 Update 1), SIMATIC WinCC (TIA Portal) (All versions < V15.1 Update 1), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) (All versions).
network
low complexity
siemens CWE-310
5.0
2019-05-14 CVE-2019-9861 Cryptographic Issues vulnerability in Abus Secvest Wireless Alarm System Fuaa50000 Firmware 3.01.01
Due to the use of an insecure RFID technology (MIFARE Classic), ABUS proximity chip keys (RFID tokens) of the ABUS Secvest FUAA50000 wireless alarm system can easily be cloned and used to deactivate the alarm system in an unauthorized way.
low complexity
abus CWE-310
4.8
2019-04-28 CVE-2019-11578 Cryptographic Issues vulnerability in Dhcpcd Project Dhcpcd
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
4.3
2019-04-26 CVE-2019-11219 Cryptographic Issues vulnerability in Ilnkp2P Project Ilnkp2P
The algorithm used to generate device IDs (UIDs) for devices that utilize Shenzhen Yunni Technology iLnkP2P suffers from a predictability flaw that allows remote attackers to establish direct connections to arbitrary devices.
network
low complexity
ilnkp2p-project CWE-310
6.4