CVE-2023-0343

CVE-2023-0343 affects Akuvox E11. The vulnerability is in a function that encrypts messages before forwarding, where both the IV and the cryptographic key are static. This configuration could allow an attacker to decrypt messages. The exposed component is the device’s encryption function (CBC-rel...

CVE-2023-20016

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...

CVE-2023-20016 Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...

Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...

CVE-2021-46873

WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently...

Design/Logic Flaw

A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the...

PT-2022-6378 · Cisco · Cisco Fxos +1

Name of the Vulnerable Software and Affected Versions: Cisco UCS Manager Software affected versions not specified Cisco FXOS Software affected versions not specified Description: A weakness in the encryption method used for the backup function could allow an unauthenticated attacker with access t...

CVE-2022-3217

When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages. An unauthenticated remote attacker with the ability to capture a login session can obtain the login credentials...

CVE-2022-3217

When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages. An unauthenticated remote attacker with the ability to capture a login session can obtain the login credentials...

VISAM VBASE 安全漏洞

VISAM VBASE is a data acquisition and monitoring system from VISAM Germany. A security vulnerability exists in VISAM VBASE version v11.7.0.2 that originates from the use of an XOR with a static initial key to obfuscate login messages. An attacker can exploit the vulnerability to obtain login...

GSD-2022-1004204 dmaengine: pl330: Fix lockdep warning about non-static key

dmaengine: pl330: Fix lockdep warning about non-static key This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.11 by commit...

CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

Code injection

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

CVE-2022-28166

In Brocade SANnav, versions prior to SANN2.2.0.2 and prior to 2.1.1.8 expose TLS/SSL servers that support static key ciphers on ports 443 and 18082. Root cause: use of static key ciphers in the TLS/SSL server implementation. Impact: potential partial confidentiality disclosure; no data integrity ...

CVE-2022-28166

In Brocade SANnav version before SANN2.2.0.2 and Brocade SANNav before 2.1.1.8, the implementation of TLS/SSL Server Supports the Use of Static Key Ciphers ssl-static-key-ciphers on ports 443 & 18082...

Broadcom Brocade SANnav 加密问题漏洞

Broadcom Brocade SANnav is a SAN management platform from Broadcom Corporation. A security vulnerability exists in Brocade SANnav versions v2.2.0.2 and v2.1.1.8, which stems from the use of static key ciphers ssl-static-key-ciphers on ports 443 and 18082...

PT-2022-3072 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.1.1.8 Brocade SANnav versions prior to SANN2.2.0.2 Description: The issue is related to the implementation of TLS/SSL Server in the Brocade SANnav software, which supports the use of static key ciphers on...

CVE-2022-23724

Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials...