CWE-1240 · 22 records

Use of a Cryptographic Primitive with a Risky Implementation

CVEs in this class

22 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-51392No exploit	Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCMsilabs · emberznet · CWE-1240 Pre-auth	Critical9.8	—	0.2%	Feb 23, 2024
39Monitor	CVE-2024-0323No exploit	FTP uses unsecure encryption mechanismsbr-automation · automation runtime · CWE-1240 Pre-auth	Critical9.8	—	0.2%	Feb 5, 2024
34Monitor	CVE-2025-24802No exploit	Soundness issue with Plonky2 look up tables0xpolygonzero · plonky2 · CWE-1240 Pre-auth	High8.6	—	0.3%	Jan 30, 2025
31Monitor	CVE-2025-58720No exploit	Windows Cryptographic Services Information Disclosure Vulnerabilitymicrosoft · windows 10 1809 · CWE-1240	High7.8	—	0.2%	Oct 14, 2025
30Monitor	CVE-2025-22475No exploit	Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Impldell · data domain operating system · CWE-1240 Pre-auth	High7.5	—	0.2%	Feb 3, 2025
30Monitor	CVE-2025-64647No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-1240 Pre-auth	High7.5	—	0.2%	Mar 25, 2026
29Monitor	CVE-2026-21751No exploit	HCL Hive is affected by use of a cryptographic primitive with a risky implementationhclsoftware · hcl hive · CWE-1240 Pre-auth	High7.4	—	0.2%	Aug 24, 2026
25Monitor	CVE-2026-22705No exploit	RustCrypto: Signatures has timing side-channel in ML-DSA decompositionrustcrypto · signatures · CWE-1240	Medium6.4	—	0.1%	Jan 10, 2026
23Monitor	CVE-2025-53960No exploit	Apache StreamPark: Uses the user’s password as the secret keyapache · streampark · CWE-1240 Pre-auth	Medium5.9	—	0.2%	Dec 12, 2025
22Monitor	CVE-2025-29808No exploit	Windows Cryptographic Services Information Disclosure Vulnerabilitymicrosoft · windows server 2022 · CWE-1240	Medium5.5	—	0.5%	Apr 8, 2025
22Monitor	CVE-2026-50303No exploit	Windows Key Guard Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1809 · CWE-1240	Medium5.5	—	0.2%	Jul 14, 2026
22Monitor	CVE-2025-14505No exploit	Elliptic Cryptanalysis vulnerability when `k` has leading zerosCWE-1240 Pre-auth	Medium5.6	—	0.1%	Jan 8, 2026
22Monitor	CVE-2024-37137No exploit	Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability.dell · cloudlink · CWE-1240 Local privilege escalation	Medium5.5	—	0.1%	Jun 27, 2024
21Monitor	CVE-2025-68833No exploit	HCL Hive is affected by use of a cryptographic primitive with a risky implementationhclsoftware · hcl hive · CWE-1240 Pre-auth	Medium5.3	—	0.2%	Aug 24, 2026
21Monitor	CVE-2025-29779No exploit	Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`davidosipov · postquantum-feldman-vss · CWE-1240	Medium5.4	—	0.1%	Mar 14, 2025
17Monitor	CVE-2025-46424No exploit	Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.dell · cloudlink · CWE-1240 Local privilege escalation Denial of service	Medium4.4	—	0.0%	Nov 5, 2025
15Monitor	CVE-2026-44410No exploit	Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTEzte · zxunipos nds-lte · CWE-1240	Low3.8	—	0.1%	May 26, 2026
9Monitor	CVE-2026-27017No exploit	uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatchrefraction-networking · utls · CWE-1240 Pre-auth	Low2.3	—	0.1%	Feb 19, 2026
0Monitor	GHSA-6wjw-qf87-fv5vNo exploit	Laravel Encrypter Failure to decryption vulnerabilityPackagist · illuminate/encryption · CWE-1240	Low	—	—	May 15, 2024
0Monitor	GHSA-7852-w36x-6mf6No exploit	Laravel Encrypter Component Potential Decryption Failure Leading to Unintended BehaviorPackagist · laravel/framework · CWE-1240	Medium	—	—	May 15, 2024
0Monitor	GHSA-434v-x5qv-pmh6No exploit	libcrux has All-Zero Key Generation Upon Catastrophic RNG Failurecrates.io · libcrux-ed25519 · CWE-1240 Pre-auth	High	—	—	Mar 26, 2026
0Monitor	GHSA-753p-wrj5-g8fjNo exploit	PQClean has a correctness error in HQC decapsulationcrates.io · pqcrypto-hqc · CWE-1240	High	—	—	Dec 11, 2024

CVE-2023-51392
39Monitor
Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCM
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
silabs · emberznetFeb 23, 2024
CVE-2024-0323
39Monitor
FTP uses unsecure encryption mechanisms
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
br-automation · automation runtimeFeb 5, 2024
CVE-2025-24802
34Monitor
Soundness issue with Plonky2 look up tables
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
0xpolygonzero · plonky2Jan 30, 2025
CVE-2025-58720
31Monitor
Windows Cryptographic Services Information Disclosure Vulnerability
HighCVSS 7.8No exploitEPSS 0%
microsoft · windows 10 1809Oct 14, 2025
CVE-2025-22475
30Monitor
Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Impl
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
dell · data domain operating systemFeb 3, 2025
CVE-2025-64647
30Monitor
Multiple Vulnerabilities in IBM Concert Software
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertMar 25, 2026
CVE-2026-21751
29Monitor
HCL Hive is affected by use of a cryptographic primitive with a risky implementation
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
hclsoftware · hcl hiveAug 24, 2026
CVE-2026-22705
25Monitor
RustCrypto: Signatures has timing side-channel in ML-DSA decomposition
MediumCVSS 6.4No exploitEPSS 0%
rustcrypto · signaturesJan 10, 2026
CVE-2025-53960
23Monitor
Apache StreamPark: Uses the user’s password as the secret key
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
apache · streamparkDec 12, 2025
CVE-2025-29808
22Monitor
Windows Cryptographic Services Information Disclosure Vulnerability
MediumCVSS 5.5No exploitEPSS 0%
microsoft · windows server 2022Apr 8, 2025
CVE-2026-50303
22Monitor
Windows Key Guard Security Feature Bypass Vulnerability
MediumCVSS 5.5No exploitEPSS 0%
microsoft · windows 10 1809Jul 14, 2026
CVE-2025-14505
22Monitor
Elliptic Cryptanalysis vulnerability when `k` has leading zeros
MediumCVSS 5.6No exploitEPSS 0%
- Pre-auth
Jan 8, 2026
CVE-2024-37137
22Monitor
Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability.
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
dell · cloudlinkJun 27, 2024
CVE-2025-68833
21Monitor
HCL Hive is affected by use of a cryptographic primitive with a risky implementation
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
hclsoftware · hcl hiveAug 24, 2026
CVE-2025-29779
21Monitor
Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`
MediumCVSS 5.4No exploitEPSS 0%
davidosipov · postquantum-feldman-vssMar 14, 2025
CVE-2025-46424
17Monitor
Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability.
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
- Denial of service
dell · cloudlinkNov 5, 2025
CVE-2026-44410
15Monitor
Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE
LowCVSS 3.8No exploitEPSS 0%
zte · zxunipos nds-lteMay 26, 2026
CVE-2026-27017
9Monitor
uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch
LowCVSS 2.3No exploitEPSS 0%
- Pre-auth
refraction-networking · utlsFeb 19, 2026
GHSA-6wjw-qf87-fv5v
0Monitor
Laravel Encrypter Failure to decryption vulnerability
LowNo exploit
Packagist · illuminate/encryptionMay 15, 2024
GHSA-7852-w36x-6mf6
0Monitor
Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior
MediumNo exploit
Packagist · laravel/frameworkMay 15, 2024
GHSA-434v-x5qv-pmh6
0Monitor
libcrux has All-Zero Key Generation Upon Catastrophic RNG Failure
HighNo exploit
- Pre-auth
crates.io · libcrux-ed25519Mar 26, 2026
GHSA-753p-wrj5-g8fj
0Monitor
PQClean has a correctness error in HQC decapsulation
HighNo exploit
crates.io · pqcrypto-hqcDec 11, 2024

All vulnerability classes