CWE-332 · Cryptography
Insufficient Entropy in PRNG
11CVEs
SortMost likely exploited
11 CVEs with CWE-332 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-18486Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided…Jitbit · Helpdesk · 2019-08-09 | – | 4.8% | 2019-08-09 |
| CVE-2016-10743hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.W1.fi · Hostapd · 2019-03-23 | – | 2.4% | 2019-03-23 |
| CVE-2014-0016stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the…Stunnel · Stunnel · 2014-03-23 | – | 2.2% | 2014-03-23 |
| CVE-2018-9057aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which mak…Hashicorp · Terraform · 2018-03-27 | – | 1.9% | 2018-03-27 |
| CVE-2019-1715Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 5.3 · 2019-05-03 | 5.3 | 1.7% | 2019-05-03 |
| CVE-2016-9154Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) an…Siemens · Desigo PX Web modules with all firmware versions < V6.00.046 · 2016-12-23 | – | 1.5% | 2016-12-23 |
| CVE-2021-4248kapetan dns Request.cs entropykapetan · dns · CVSS 5.6 · 2022-12-18 | 5.6 | 0.8% | 2022-12-18 |
| CVE-2014-9690Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the ra…Huawei · WS318 V100R001C01B022 and earlier versions · 2017-04-02 | – | 0.8% | 2017-04-02 |
| CVE-2017-9371In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an…BlackBerry · QNX Software Development Platform (QNX SDP) · CVSS 2.6 · 2017-11-14 | 2.6 | 0.8% | 2017-11-14 |
| CVE-2023-20107Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 5.3 · 2023-03-23 | 5.3 | 0.7% | 2023-03-23 |
| CVE-2026-3290Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable valuesSilicon Labs · RS9116 SDK · CVSS 7.4 · 2026-05-14 | 7.4 | 0.2% | 2026-05-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.