← Back
CWE-335

43 CVEs • Abstraction: Base

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

JSON object

Loading...

CVEs (43)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-11519
1Tp Link
1Archer C9 (2.0) Firmware
May 13, 2026
Jul 21, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable random number generator seed. This is fixed in C9(UN)_V2_170511.
CVE-2017-5214
1Codextrous
1B2j Contact
May 13, 2026
May 17, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.
CVE-2016-10180
1Dlink
1Dwr 932b Firmware
May 13, 2026
Jan 30, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.