CWE-338

Medium likelihood

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Parent: CWE-330 - Use of Insufficiently Random Values

The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.

184 vulnerabilities with CWE-338
CVE-2013-20003 HIGH
Silicon Labs Z-Wave Firmware - Use of a Broken or Risky Cryptographic Algorithm via Shared Network Key
CVSS 8.3
CVE-2012-6124 MEDIUM
Chicken < 4.8.0 - Cryptographically Weak PRNG via Casting Error
CVSS 5.3
CVE-2011-4574 CRITICAL
PolarSSL < 1.1.0 - Use of Cryptographically Weak PRNG via HAVEGE Algorithm
CVSS 9.8
CVE-2009-3278 MEDIUM
QNAP TS-239 Pro/TS-639 Pro <3.1.1 - Info Disclosure
CVSS 5.5
CVE-2009-3238 MEDIUM
Linux kernel <2.6.30 - Info Disclosure
CVSS 5.5
CVE-2009-2367 CRITICAL
Iomega StorCenter Pro - Info Disclosure
CVSS 9.8
CVE-2008-3280 MEDIUM
OpenID - Use of Cryptographically Weak Pseudo-Random Number Generator
CVSS 5.9
CVE-2008-0166 HIGH
OpenSSL <0.9.8g-9 - Info Disclosure
CVSS 7.5
CVE-2002-20002 MEDIUM
Net::EasyTCP <0.15 - Info Disclosure
CVSS 5.4
Details
Vulnerabilities 184
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits