CWE-329 · 11 records

Generation of Predictable IV with CBC Mode

CVEs in this class

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2022-46397No exploit	FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable lfprojects · vector packet processor · CWE-329 Pre-auth	High7.5	—	0.6%	Mar 28, 2023
30Monitor	CVE-2025-59322No exploit	CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mountedCWE-329 Pre-auth	High7.5	—	0.4%	Aug 12, 2026
26Monitor	CVE-2020-5408No exploit	Dictionary attack with Spring Security queryable text encryptorpivotal software · spring security · CWE-329	Medium6.5	—	1.5%	May 14, 2020
26Monitor	CVE-2024-49783No exploit	IBM OpenPages with Watson information disclosureibm · openpages with watson · CWE-329	Medium6.5	—	0.3%	Jul 8, 2025
25Monitor	CVE-2017-3226No exploit	Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allodenx · u-boot · CWE-329	Medium6.4	—	0.2%	Jul 24, 2018
23Monitor	CVE-2021-27499No exploit	Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior typsomed · mylife · CWE-329 Pre-auth	Medium5.9	—	0.4%	Aug 2, 2021
20Monitor	CVE-2024-56141No exploit	Minosoft has IV equal to keybixilon · minosoft · CWE-329	Medium5.0	—	0.1%	Jul 7, 2026
18Monitor	CVE-2017-3225No exploit	Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and alldenx · u-boot · CWE-329	Medium4.6	—	0.3%	Jul 24, 2018
17Monitor	CVE-2026-14969No exploit	389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionredhat · directory server · CWE-329 Local privilege escalation	Medium4.4	—	0.1%	Jul 7, 2026
16Monitor	CVE-2025-2814No exploit	Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functionslds · crypt::cbc · CWE-329 Denial of service	Medium4.0	—	0.1%	Apr 12, 2025
13Monitor	CVE-2022-29054No exploit	A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0,fortinet · fortiproxy · CWE-329	Low3.3	—	0.1%	Feb 16, 2023

CVE-2022-46397
30Monitor
FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
lfprojects · vector packet processorMar 28, 2023
CVE-2025-59322
30Monitor
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
Aug 12, 2026
CVE-2020-5408
26Monitor
Dictionary attack with Spring Security queryable text encryptor
MediumCVSS 6.5No exploitEPSS 1%
pivotal software · spring securityMay 14, 2020
CVE-2024-49783
26Monitor
IBM OpenPages with Watson information disclosure
MediumCVSS 6.5No exploitEPSS 0%
ibm · openpages with watsonJul 8, 2025
CVE-2017-3226
25Monitor
Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allo
MediumCVSS 6.4No exploitEPSS 0%
denx · u-bootJul 24, 2018
CVE-2021-27499
23Monitor
Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior t
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
ypsomed · mylifeAug 2, 2021
CVE-2024-56141
20Monitor
Minosoft has IV equal to key
MediumCVSS 5.0No exploitEPSS 0%
bixilon · minosoftJul 7, 2026
CVE-2017-3225
18Monitor
Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and all
MediumCVSS 4.6No exploitEPSS 0%
denx · u-bootJul 24, 2018
CVE-2026-14969
17Monitor
389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption
MediumCVSS 4.4No exploitEPSS 0%
- Local privilege escalation
redhat · directory serverJul 7, 2026
CVE-2025-2814
16Monitor
Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions
MediumCVSS 4.0No exploitEPSS 0%
- Denial of service
lds · crypt::cbcApr 12, 2025
CVE-2022-29054
13Monitor
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0,
LowCVSS 3.3No exploitEPSS 0%
fortinet · fortiproxyFeb 16, 2023

All vulnerability classes