Small Space of Random Values

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Communication Components in multiple CODESYS products vulnerable to communication channel disruptionCVE-2022-22517CODESYS · CVSS 7.5 · 1.5% likely

   CODESYS

2. An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffin…CVE-2021-21955Anker · CVSS 7.7 · 1.0% likely

   Anker

3. MXsecurity Authentication BypassCVE-2023-39979Moxa · CVSS 9.8 · 1.0% likely

   Moxa

4. Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.CVE-2022-33707Samsung Mobile · 0.8% likely

   Samsung

5. A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive infor…CVE-2022-20941Cisco · CVSS 5.3 · 0.8% likely

   Cisco

6. Avahi: avahi wide-area dns predictable transaction idsCVE-2024-52616avahi · CVSS 5.3 · 0.7% likely

   Avahi

7. Intentionally weakened effective strength in TETRA TEA1CVE-2022-24402ETSI · CVSS 8.8 · 0.6% likely

   ETSI

8. CVE-2023-1898Atlas Copco · CVSS 9.4 · 0.6% likely
9. Low token entropy in MegaBIPCVE-2025-3895Jan Syski · CVSS 9.1 · 0.5% likely

   Jan Syski

10. A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 <…CVE-2024-54017Siemens · CVSS 5.3 · 0.3% likelycovered by CyberSIXT

    Siemens

11. A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the att…CVE-2020-7566Schneider-Electric · CVSS 7.1 · 0.3% likely

    Schneider Electric

12. A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate with…CVE-2023-6951DJI · CVSS 6.6 · 0.3% likely

    DJI

13. paicoding 1.0.3 Payment Bypass via Guessable Codes in /article/api/pay/callbackCVE-2026-129144itwanger · CVSS 5.4 · 0.2% likely

    Itwanger

14. In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this…CVE-2026-122118Yealink · CVSS 7.4 · 0.2% likely

    Yealink

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.