CWE-326
467 CVEs • Abstraction: Class
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
CVEs (467)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Jan 9, 2024 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
1Assaabloy 1Yale Keyless Smart Lock Firmware Jun 17, 2026 Dec 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Weak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a cloned tag via physical proximity to the original. |
Weak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a cloned tag via physical proximity to the original. |
1Assaabloy 1Yale Conexis L1 Firmware Jun 17, 2026 Dec 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Weak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a cloned tag via physical proximity to the original. |
Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with...Show more |
An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes via use of weak encryption. |
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding. |
1Elecom 34Lan W300n/p Firmware Lan W300n/rs FirmwareLan W301nr Firmware+31 moreJun 17, 2026 Nov 16, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjacent unauthenticated attacker to guess the encryption key used for wireless LAN co...Show more |
An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm. |
The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notifications. |
The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims |
The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims. |
Weak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL). |