Skip to content
Noroxi

CWE-323 · 47 records

Reusing a Nonce, Key Pair in Encryption

CVEs in this class

47 records

  • CVE-2017-7902
    40Plan

    A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic con

    CriticalCVSS 9.8No exploitEPSS 3%

    rockwellautomation · 1763-l16awa series aJun 29, 2017

  • CVE-2025-59870
    39Monitor

    Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

    CriticalCVSS 9.8No exploitEPSS 0%

    hcltech · myxalyticsJan 16, 2026

  • CVE-2026-49952
    38Monitor

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    CriticalCVSS 9.3Proof of conceptEPSS 4%

    discuz! · discuz! x5.0Jun 15, 2026

  • CVE-2026-59099
    37Monitor

    Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

    CriticalCVSS 9.3No exploitEPSS 1%

    apereo · casJul 2, 2026

  • CVE-2019-7593
    36Monitor

    Metasys use of shared RSA key pairs

    CriticalCVSS 9.1No exploitEPSS 1%

    johnsoncontrols · metasys systemAug 20, 2019

  • CVE-2026-12205
    36Monitor

    Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

    CriticalCVSS 9.1No exploitEPSS 0%

    timlegge · crypt::dsaJun 15, 2026

  • CVE-2025-64767
    36Monitor

    hpke-js reuses AEAD nonces

    CriticalCVSS 9.1No exploitEPSS 0%

    dajiaji · hpke-jsNov 21, 2025

  • CVE-2026-25998
    34Monitor

    strongMan vulnerable to private credential recovery due to key and counter reuse

    HighCVSS 8.7No exploitEPSS 0%

    strongswan · strongmanFeb 19, 2026

  • CVE-2017-13082
    33Monitor

    Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK)

    HighCVSS 8.1No exploitEPSS 5%

    canonical · ubuntu linuxOct 17, 2017

  • CVE-2025-47345
    33Monitor

    Reusing a Nonce, Key Pair in Encryption in Automotive Platform

    HighCVSS 8.4No exploitEPSS 0%

    qualcomm · wcd9385 firmwareJan 7, 2026

  • CVE-2026-3559
    32Monitor

    Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    philips · hue bridge v2 firmwareMar 16, 2026

  • CVE-2026-71884
    32Monitor

    Packet CTR reports a full success length after the counter is exhausted

    HighCVSS 8.2No exploitEPSS 0%

    legion of the bouncy castle inc. · bc-lts-java5 days ago

  • CVE-2022-24401
    32Monitor

    Keystream recovery for arbitrary frames in TETRA

    HighCVSS 8.1No exploitEPSS 0%

    midnightblue · tetra\Oct 19, 2023

  • CVE-2026-50577
    29Monitor

    ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

    HighCVSS 7.4No exploitEPSS 1%

    fbeta-gmbh · epa3-service-opensourceAug 18, 2026

  • CVE-2026-3099
    29Monitor

    Libsoup: libsoup: authentication bypass via digest authentication replay attack

    HighCVSS 7.3No exploitEPSS 1%

    gnome · libsoupMar 12, 2026

  • CVE-2026-81019
    29Monitor

    wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    HighCVSS 7.4No exploitEPSS 0%

    wolfssl · wolfproviderAug 28, 2026

  • CVE-2026-81020
    29Monitor

    wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    HighCVSS 7.4No exploitEPSS 0%

    wolfssl · wolfengineAug 28, 2026

  • CVE-2017-13084
    28Monitor

    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey han

    MediumCVSS 6.8No exploitEPSS 2%

    canonical · ubuntu linuxOct 17, 2017

  • CVE-2017-13086
    28Monitor

    Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshak

    MediumCVSS 6.8No exploitEPSS 2%

    canonical · ubuntu linuxOct 17, 2017

  • CVE-2025-61739
    28Monitor

    Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

    HighCVSS 7.2No exploitEPSS 0%

    johnson controls · iq panels2, 2+, iqhub, iqpanel 4, powergDec 22, 2025

  • CVE-2026-21383
    28Monitor

    Reusing a Nonce, Key Pair in Encryption in HLOS

    HighCVSS 7.1No exploitEPSS 0%

    qualcomm · fastconnect 6900 firmwareJul 6, 2026

  • CVE-2020-1759
    27Monitor

    A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was disco

    MediumCVSS 6.8No exploitEPSS 2%

    redhat · ceph storageApr 13, 2020

  • CVE-2023-4680
    27Monitor

    Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption

    MediumCVSS 6.8No exploitEPSS 0%

    hashicorp · vaultSep 14, 2023

  • CVE-2023-7003
    27Monitor

    The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to

    MediumCVSS 6.8No exploitEPSS 0%

    sciener · kontrol luxMar 15, 2024

  • CVE-2023-28997
    26Monitor

    Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files

    MediumCVSS 6.5No exploitEPSS 1%

    nextcloud · desktopApr 4, 2023

All vulnerability classes