Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

CVEs (455)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-20400 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Dec 1, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196074.
CVE-2021-38891 1Ibm 1Sterling Connect\ Jun 17, 2026 Nov 23, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 209508.
CVE-2021-44150 1Transloadit 1Tusdotnet Jun 17, 2026 Nov 22, 2021 N/A· v4 7.5 HIGH· v3 4.3 MEDIUM· v2 The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.
CVE-2021-38984 1Ibm 2Security Guardium Key Lifecycle Manager Security Key Lifecycle Manager Jun 17, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793.
CVE-2021-38983 1Ibm 2Security Guardium Key Lifecycle Manager Security Key Lifecycle Manager Jun 17, 2026 Nov 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792.
CVE-2021-3789 1Binatoneglobal 21Cn28 Firmware Cn40 FirmwareCn50 Firmware+18 more Jun 17, 2026 Nov 12, 2021 N/A· v4 4.6 MEDIUM· v3 2.1 LOW· v2 An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update package...Show more An information disclosure vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access to obtain the encryption key used to decrypt firmware update packages.Show less
CVE-2021-39182 1Enrocrypt Project 1Enrocrypt Jun 17, 2026 Nov 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is consider...Show more EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.Show less
CVE-2021-38464 1Inhandnetworks 1Ir615 Firmware Jun 17, 2026 Oct 19, 2021 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 have inadequate encryption strength, which may allow an attacker to intercept the communication and steal sensitive information or hijack the session.
CVE-2021-38862 1Ibm 1Data Risk Manager Jun 17, 2026 Oct 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 207980.
CVE-2021-38925 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Oct 6, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling B2B Integrator Standard Edition 5.2.0. 0 through 6.1.1.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 210171.
CVE-2021-23855 1Bosch 2Rexroth Indramotion Mlc Firmware Rexroth Indramotion Xlc Firmware Jun 17, 2026 Oct 4, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.
CVE-2017-16632 1Sapphireims 1Sapphireims Nov 21, 2024 Aug 11, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In SapphireIMS 4097_1, the password in the database is stored in Base64 format.
CVE-2021-37606 1Meow Hash Project 1Meow Hash Jun 17, 2026 Jul 30, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-runnin...Show more Meow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query whether there's a collision in the bottom bits of the hashes of two messages, as demonstrated by an attack against a long-running web service that allows the attacker to infer collisions by measuring timing differences.Show less
CVE-2021-28095 1Open Xchange 1Open Xchange Documents Jun 17, 2026 Jul 30, 2021 N/A· v4 4.8 MEDIUM· v3 5.8 MEDIUM· v2 OX Documents before 7.10.5-rev5 has Incorrect Access Control for documents that contain XML structures because hash collisions can occur, due to use of CRC32.
CVE-2021-28094 1Open Xchange 1Open Xchange Documents Jun 17, 2026 Jul 30, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 OX Documents before 7.10.5-rev7 has Incorrect Access Control for converted documents because hash collisions can occur, due to use of CRC32.
CVE-2021-28093 1Open Xchange 1Open Xchange Documents Jun 17, 2026 Jul 30, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 OX Documents before 7.10.5-rev5 has Incorrect Access Control of converted images because hash collisions can occur, due to use of Adler32.
CVE-2021-20369 1Ibm 1Cloud Pak For Applications Jun 17, 2026 Jul 13, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361.
CVE-2021-20360 1Ibm 1Cloud Pak For Applications Jun 17, 2026 Jul 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031.
CVE-2021-34430 1Eclipse 1Tinydtls Jun 17, 2026 Jul 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.
CVE-2021-32496 1Sick 1Visionary S Cx Firmware Jun 17, 2026 Jun 28, 2021 N/A· v4 5.3 MEDIUM· v3 3.5 LOW· v2 SICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength vulnerability concerning the internal SSH interface solely used by SICK for recovering returned devices. The use of weak ci...Show more SICK Visionary-S CX up version 5.21.2.29154R are vulnerable to an Inadequate Encryption Strength vulnerability concerning the internal SSH interface solely used by SICK for recovering returned devices. The use of weak ciphers make it easier for an attacker to break the security that protects information transmitted from the client to the SSH server, assuming the attacker has access to the network on which the device is connected. This can increase the risk that encryption will be compromised, leading to the exposure of sensitive user information and man-in-the-middle attacks.Show less

Previous 1...111213...23 Next