TYPE DE FAIBLESSE

CWE-334

6 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-334 (en anglais) →

CVE-2024-54017Plusieurs modèles de dispositifs de protection Siemens SIPROTEC 5 sont affectés par l'utilisation d'identifiants de session prévisibles. Un attaquant distant non authentifié dispos… 6.9 MOYENNE

CVE-2024-52616A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior f… 5.3 MOYENNE

CVE-2024-51720An insufficient entropy vulnerability in the SecuSUITE Secure Client Authentication (SCA) Server of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially en… 4.8 MOYENNE

CVE-2023-6951A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key and authenticate witho… 6.6 MOYENNE

CVE-2022-20941A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to access sensitive inform… 5.3 MOYENNE

CVE-2022-33707Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device. 5.3 MOYENNE