CWE-342 · 7 records

Predictable Exact Value from Previous Values

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-16226No exploit	Mitsubishi Electric Multiple Productsmitsubishielectric · qj71mes96 firmware · CWE-342 pre-auth RCE	Critical9.8	—	2.3%	Oct 5, 2020
38Monitor	CVE-2014-9196No exploit	Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Etherneteaton · proview · CWE-342 Pre-auth	Critical9.3	—	2.3%	Jul 19, 2015
36Monitor	CVE-2022-27577No exploit	The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number.sick · msc800 firmware · CWE-342 Pre-auth	Critical9.1	—	1.4%	Apr 11, 2022
36Monitor	CVE-2023-3373No exploit	Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 amitsubishielectric · gt21 firmware · CWE-342 Pre-auth	Critical9.1	—	1.0%	Aug 3, 2023
35Monitor	CVE-2026-88778No exploit	TCP Initial Sequence Number (ISN) predictioncitrix · netscaler application delivery controller · CWE-342 Pre-auth	High8.8	—	0.4%	2 days ago
21Monitor	CVE-2020-28388No exploit	A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <siemens · capital vstar · CWE-342 Pre-auth	Medium5.3	—	1.4%	Feb 9, 2021
19Monitor	CVE-2022-29930No exploit	SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value.jetbrains · ktor · CWE-342	Medium4.9	—	0.9%	May 12, 2022

CVE-2020-16226
40Plan
Mitsubishi Electric Multiple Products
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
mitsubishielectric · qj71mes96 firmwareOct 5, 2020
CVE-2014-9196
38Monitor
Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet
CriticalCVSS 9.3No exploitEPSS 2%
- Pre-auth
eaton · proviewJul 19, 2015
CVE-2022-27577
36Monitor
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number.
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
sick · msc800 firmwareApr 11, 2022
CVE-2023-3373
36Monitor
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.000 a
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
mitsubishielectric · gt21 firmwareAug 3, 2023
CVE-2026-88778
35Monitor
TCP Initial Sequence Number (ISN) prediction
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
citrix · netscaler application delivery controller2 days ago
CVE-2020-28388
21Monitor
A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
siemens · capital vstarFeb 9, 2021
CVE-2022-29930
19Monitor
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value.
MediumCVSS 4.9No exploitEPSS 1%
jetbrains · ktorMay 12, 2022