Vulnerabilities > Use of Insufficiently Random Values

DATE CVE VULNERABILITY TITLE RISK
2024-01-02 CVE-2023-32831 Use of Insufficiently Random Values vulnerability in Mediatek Software Development KIT
In wlan driver, there is a possible PIN crack due to use of insufficiently random values.
local
low complexity
mediatek CWE-330
5.5
2023-11-30 CVE-2023-6376 Use of Insufficiently Random Values vulnerability in Henschen Court Document Management
Henschen & Associates court document management software does not sufficiently randomize file names of cached documents, allowing a remote, unauthenticated attacker to access restricted documents.
network
low complexity
henschen CWE-330
7.5
2023-11-16 CVE-2023-48056 Use of Insufficiently Random Values vulnerability in Bandoche Pypinksign 0.5.1
PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.
network
low complexity
bandoche CWE-330
7.5
2023-10-10 CVE-2020-27213 Use of Insufficiently Random Values vulnerability in Ethernut Nut/Os 5.1
An issue was discovered in Ethernut Nut/OS 5.1.
network
low complexity
ethernut CWE-330
7.5
2023-10-10 CVE-2020-27630 Use of Insufficiently Random Values vulnerability in Silabs Uc/Tcp-Ip 3.6.0
In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.
network
low complexity
silabs CWE-330
critical
9.8
2023-10-10 CVE-2020-27631 Use of Insufficiently Random Values vulnerability in Oryx-Embedded Cyclonetcp 1.9.6
In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.
network
low complexity
oryx-embedded CWE-330
critical
9.8
2023-10-10 CVE-2020-27633 Use of Insufficiently Random Values vulnerability in Butok Fnet 4.6.3
In FNET 4.6.3, TCP ISNs are improperly random.
network
low complexity
butok CWE-330
critical
9.1
2023-10-10 CVE-2020-27634 Use of Insufficiently Random Values vulnerability in Contiki-Ng 4.5
In Contiki 4.5, TCP ISNs are improperly random.
network
low complexity
contiki-ng CWE-330
critical
9.1
2023-10-10 CVE-2020-27635 Use of Insufficiently Random Values vulnerability in Capgemini Picotcp 1.7.0
In PicoTCP 1.7.0, TCP ISNs are improperly random.
network
low complexity
capgemini CWE-330
critical
9.1
2023-10-10 CVE-2020-27636 Use of Insufficiently Random Values vulnerability in Microchip Mplab Network Creator 3.6.1
In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.
network
low complexity
microchip CWE-330
critical
9.1