CWE-334 · Cryptography
Small Space of Random Values
14CVEs
SortMost likely exploited
14 CVEs with CWE-334 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-22517Communication Components in multiple CODESYS products vulnerable to communication channel disruptionCODESYS · CODESYS Control RTE (SL) · CVSS 7.5 · 2022-04-07 | 7.5 | 1.5% | 2022-04-07 |
| CVE-2021-21955An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffin…Anker · Anker · CVSS 7.7 · 2021-12-09 | 7.7 | 1.0% | 2021-12-09 |
| CVE-2023-39979MXsecurity Authentication BypassMoxa · MXsecurity Series · CVSS 9.8 · 2023-09-02 | 9.8 | 1.0% | 2023-09-02 |
| CVE-2022-33707Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.Samsung Mobile · FindMyMobile · 2022-07-11 | – | 0.8% | 2022-07-11 |
| CVE-2022-20941A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive infor…Cisco · Cisco Firepower Management Center · CVSS 5.3 · 2022-11-10 | 5.3 | 0.8% | 2022-11-10 |
| CVE-2024-52616Avahi: avahi wide-area dns predictable transaction idsavahi · avahi · CVSS 5.3 · 2024-11-21 | 5.3 | 0.7% | 2024-11-21 |
| CVE-2022-24402Intentionally weakened effective strength in TETRA TEA1ETSI · TETRA Standard · CVSS 8.8 · 2023-10-19 | 8.8 | 0.6% | 2023-10-19 |
| CVE-2023-1898CVE-2023-1898Atlas Copco · Power Focus · CVSS 9.4 · 2023-06-12 | 9.4 | 0.6% | 2023-06-12 |
| CVE-2025-3895Low token entropy in MegaBIPJan Syski · MegaBIP · CVSS 9.1 · 2025-05-23 | 9.1 | 0.5% | 2025-05-23 |
| CVE-2024-54017A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 <…Siemens · SIPROTEC 5 6MD84 (CP300) · CVSS 5.3 · 2026-05-12 | 5.3 | 0.3% | 2026-05-12 |
| CVE-2020-7566A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to break the encryption keys when the att…Schneider-Electric · Modicon M221, all references, all versions · CVSS 7.1 · 2020-11-19 | 7.1 | 0.3% | 2020-11-19 |
| CVE-2023-6951A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate with…DJI · Mavic 3 Pro · CVSS 6.6 · 2024-04-02 | 6.6 | 0.3% | 2024-04-02 |
| CVE-2026-129144paicoding 1.0.3 Payment Bypass via Guessable Codes in /article/api/pay/callbackitwanger · paicoding · CVSS 5.4 · 2026-11-13 | 5.4 | 0.2% | 2026-11-13 |
| CVE-2026-122118In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used. Attackers can exploit this…Yealink · AVHub · CVSS 7.4 · 2026-11-04 | 7.4 | 0.2% | 2026-11-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.