Vulnerabilities > Use of a Broken or Risky Cryptographic Algorithm

DATE CVE VULNERABILITY TITLE RISK
2019-08-21 CVE-2019-12621 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Cisco products
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack.
network
high complexity
cisco CWE-327
7.4
2019-08-20 CVE-2019-5035 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Google Nest CAM IQ Indoor Firmware 4620002
An exploitable information disclosure vulnerability exists in the Weave PASE pairing functionality of the Nest Cam IQ Indoor, version 4620002.
network
high complexity
google CWE-327
critical
9.0
2019-08-15 CVE-2019-9013 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Codesys products
An issue was discovered in 3S-Smart CODESYS V3 products.
low complexity
codesys CWE-327
8.8
2019-08-14 CVE-2019-9506 Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products
The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation.
8.1
2019-08-07 CVE-2016-5431 Use of a Broken or Risky Cryptographic Algorithm vulnerability in PHP Jose Project PHP Jose
The PHP JOSE Library by Gree Inc.
network
low complexity
php-jose-project CWE-327
7.5
2019-08-05 CVE-2019-5502 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Netapp Data Ontap
SMB in Data ONTAP operating in 7-Mode versions prior to 8.2.5P3 has weak cryptography which when exploited could lead to information disclosure or addition or modification of data.
network
low complexity
netapp CWE-327
critical
9.1
2019-08-02 CVE-2019-7858 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Magento
A cryptographic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2 resulted in storage of sensitive information with an algorithm that is insufficiently resistant to brute force attacks.
network
low complexity
magento CWE-327
7.5
2019-07-15 CVE-2019-13604 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Assaabloy HID Digitalpersona 4500 Firmware 24
There is a short key vulnerability in HID Global DigitalPersona (formerly Crossmatch) U.are.U 4500 Fingerprint Reader v24.
network
high complexity
assaabloy CWE-327
5.9
2019-06-29 CVE-2019-13052 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Logitech Unifying Receiver Firmware
Logitech Unifying devices allow live decryption if the pairing of a keyboard to a receiver is sniffed.
low complexity
logitech CWE-327
6.5
2019-06-25 CVE-2019-9836 Use of a Broken or Risky Cryptographic Algorithm vulnerability in multiple products
Secure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor (PSP; aka AMD Secure Processor or AMD-SP) 0.17 build 11 and earlier has an insecure cryptographic implementation.
network
low complexity
amd opensuse CWE-327
5.3