CVE-2023-43757: Inadequate Encryption Strength

Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN communication and intercept the communication. As for the affected...

Multiple vulnerabilities in ELECOM and LOGITEC routers

Overview Multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2023-43752 Inadequate Encryption Strength CWE-326 - CVE-2023-43757 CVE-2023-43752 Chuya Hayakawa of 00One, Inc. reported this vulnerabilit...

Microsoft Bluetooth Driver security vulnerabilities

Bluetooth is a popular wireless communication technology. A man-in-the-middle attack vulnerability exists in the Bluetooth Core Specification, which can be exploited by an attacker to compromise session authentication between Bluetooth devices, be able to force a short encryption key length using...

Siemens SCALANCE security vulnerabilities

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers.The SCALANCE W products are wireless communication devices for connecting industrial components, such as Programmable Logic Controllers PLCs or Human Machine Interfaces HMIs, that comply with the IEEE 802.11...

UBUNTU-CVE-2023-46894

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

CVE-2023-46894: Inadequate Encryption Strength

An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm...

FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength

Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient CWE-1391. Kunal Thakrar and Ceri Coburn of Pen Test...

CVE-2023-46327

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

CVE-2023-46327

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

Fujifilm Multiple Printer Security Vulnerabilities

Fujifilm ApeosPort and Fujifilm Xerox are both products of Fujifilm, a Japanese company.Fujifilm ApeosPort is a line of multifunction printers.Fujifilm Xerox is a line of laser printers. A security vulnerability exists in a number of Fujifilm printers and stems from insufficient encryption...

CVE-2023-44690

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py...

Server prefers weak encryption ciphers during TLS negotiation

TLS cipher suite issues were detected: Server prefers weak encryption ciphers during TLS negotiation...

CVE-2023-43776

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card .PRG file ending...

IBM QRadar SIEM Encryption Issues Vulnerabilities

IBM QRadar SIEM is a solution from International Business Machines IBM that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user...

HCL Technologies BigFix Insights for Vulnerability Remediation (IVR) Weak Encryption Vulnerability

HCL Technologies BigFix Insights is a U.S.-based company that accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. HCL Technologies BigFix Insights for Vulnerability Remediatio...

HCL Technologies BigFix Insights Security Vulnerabilities

HCL Technologies BigFix Insights is a U.S.-based company that accelerates risk identification and decision making through elevated views of endpoint queue data, rich reporting, and integration with existing business intelligence tools. HCL Technologies BigFix Insights for Vulnerability Remediatio...

RUGGEDCOM ROX Man-in-the-Middle

The vulnerability of microprogramming software in routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, and RUGGEDCOM ROX RX1400 is related to the use of weak encryption algorithms. Exploiting this vulnerability can allow a remote attacker to carry out a...

EMUI Messaging Module Data Compromise

The vulnerability of the EMUI messaging module of the HarmonyOS operating system is related to the use of a weak encryption mechanism when sending 5G messages. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the information being protected...

PT-2023-27884 · Dell · Dell Emc Data Protection Central

Name of the Vulnerable Software and Affected Versions: Dell Data Protection Central version 19.9 Description: The issue is related to inadequate encryption strength, allowing an unauthenticated network attacker to potentially recover plaintext from a block of ciphertext. This could be exploited b...

Firefox Weak Encryption

The vulnerability in the Firefox web browser is related to weak encryption. Exploiting this vulnerability allows a remote attacker to compromise data integrity...