Skip to content
Noroxi

CWE-332 · 10 records

Insufficient Entropy in PRNG

CVEs in this class

10 records

  • CVE-2018-9057
    40Plan

    aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriat

    CriticalCVSS 9.8No exploitEPSS 2%

    hashicorp · terraformMar 27, 2018

  • CVE-2016-10743
    31Monitor

    hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.

    HighCVSS 7.5No exploitEPSS 2%

    w1.fi · hostapdMar 23, 2019

  • CVE-2019-1715
    31Monitor

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability

    HighCVSS 7.5No exploitEPSS 2%

    cisco · adaptive security appliance device managerMay 3, 2019

  • CVE-2016-9154
    30Monitor

    Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D

    HighCVSS 7.5No exploitEPSS 1%

    siemens · desigo web module pxa30-w0 firmwareDec 23, 2016

  • CVE-2014-9690
    30Monitor

    Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerabi

    HighCVSS 7.5No exploitEPSS 1%

    huawei · ws318 firmwareApr 2, 2017

  • CVE-2023-20107
    30Monitor

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys Vulnerability

    HighCVSS 7.5No exploitEPSS 1%

    cisco · adaptive security applianceMar 23, 2023

  • CVE-2017-18486
    29Monitor

    Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter.

    HighCVSS 7.2Proof of conceptEPSS 5%

    jitbit · helpdeskAug 9, 2019

  • CVE-2026-3290
    29Monitor

    Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable values

    HighCVSS 7.4No exploitEPSS 0%

    silicon labs · rs9116 sdkMay 14, 2026

  • CVE-2014-0016
    18Monitor

    stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), whi

    MediumCVSS 4.3No exploitEPSS 2%

    stunnel · stunnelMar 24, 2014

  • CVE-2017-9371
    10Monitor

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default conf

    LowCVSS 2.6No exploitEPSS 1%

    blackberry · qnx software development platformNov 14, 2017

All vulnerability classes