Vulnerabilities > Inadequate Encryption Strength

DATE CVE VULNERABILITY TITLE RISK
2023-08-04 CVE-2023-0525 Inadequate Encryption Strength vulnerability in Mitsubishielectric products
Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 model versions 01.49.000 and prior, GT21 model versions 01.49.000 and prior, GOT SIMPLE Series GS25 model versions 01.49.000 and prior, GS21 model versions 01.49.000 and prior, GT Designer3 Version1 (GOT2000) versions 1.295H and prior and GT SoftGOT2000 versions 1.295H and prior allows a remote unauthenticated attacker to obtain plaintext passwords by sniffing packets containing encrypted passwords and decrypting the encrypted passwords, in the case of transferring data with GT Designer3 Version1(GOT2000) and GOT2000 Series or GOT SIMPLE Series with the Data Transfer Security function enabled, or in the case of transferring data by the SoftGOT-GOT link function with GT SoftGOT2000 and GOT2000 series with the Data Transfer Security function enabled.
network
low complexity
mitsubishielectric CWE-326
7.5
2023-07-18 CVE-2023-28021 Inadequate Encryption Strength vulnerability in Hcltech Bigfix Webui
The BigFix WebUI uses weak cipher suites.
network
low complexity
hcltech CWE-326
7.5
2023-07-12 CVE-2023-20185 Inadequate Encryption Strength vulnerability in Cisco Nx-Os
A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated, remote attacker to read or modify intersite encrypted traffic. This vulnerability is due to an issue with the implementation of the ciphers that are used by the CloudSec encryption feature on affected switches.
network
high complexity
cisco CWE-326
7.4
2023-07-11 CVE-2023-36748 Inadequate Encryption Strength vulnerability in Siemens products
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (All versions < V2.16.0), RUGGEDCOM ROX RX1500 (All versions < V2.16.0), RUGGEDCOM ROX RX1501 (All versions < V2.16.0), RUGGEDCOM ROX RX1510 (All versions < V2.16.0), RUGGEDCOM ROX RX1511 (All versions < V2.16.0), RUGGEDCOM ROX RX1512 (All versions < V2.16.0), RUGGEDCOM ROX RX1524 (All versions < V2.16.0), RUGGEDCOM ROX RX1536 (All versions < V2.16.0), RUGGEDCOM ROX RX5000 (All versions < V2.16.0).
network
high complexity
siemens CWE-326
6.8
2023-07-05 CVE-2023-34337 Inadequate Encryption Strength vulnerability in AMI Megarac Sp-X 12/13
AMI SPx contains a vulnerability in the BMC where a user may cause an inadequate encryption strength by hash-based message authentication code (HMAC).
network
low complexity
ami CWE-326
8.8
2023-06-30 CVE-2023-36539 Inadequate Encryption Strength vulnerability in Zoom products
Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
network
low complexity
zoom CWE-326
7.5
2023-06-07 CVE-2023-33283 Inadequate Encryption Strength vulnerability in Marvalglobal MSM
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets.
local
low complexity
marvalglobal CWE-326
5.5
2023-06-02 CVE-2023-23597 Inadequate Encryption Strength vulnerability in Mozilla Firefox
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the <code>file://</code> context.
network
low complexity
mozilla CWE-326
6.5
2023-06-02 CVE-2023-29549 Inadequate Encryption Strength vulnerability in Mozilla Firefox and Focus
Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm.
network
low complexity
mozilla CWE-326
6.5
2023-05-24 CVE-2023-33982 Inadequate Encryption Strength vulnerability in Briarproject Briar
Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic between two accounts if they later compromise both accounts.
network
high complexity
briarproject CWE-326
5.9