CWE-337 - Predictable Seed in Pseudo-Random Number Generator (PRNG)

Description

A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.






Latest vulnerabilities for CWE-337

Multiple vulnerabilities in IBM Netezza Appliance 2025-12-17
Medium Yes Public exploit
Authentication bypass in Apache Druid Kerberos authenticator 2025-11-28
High Yes
Multiple vulnerabilities in IBM i 2025-11-11
Medium Yes Public exploit
Multiple vulnerabilities in ISC BIND 2025-10-23
Medium Yes Public exploit
Multiple vulnerabilities in AutomationDirect CLICK PLUS 2025-09-24
High Yes
Multiple vulnerabilities in Intel TDX 2025-08-15
Low Yes
Multiple vulnerabilities in IBM Business Automation Insights 2025-08-08
High Yes Public exploit
Multiple vulnerabilities in IBM API Connect 2025-06-11
Critical Yes Public exploit
DNS spoofing attack in Avahi 2024-12-11
Medium No
Local denial of service in ColPack 2024-12-10
Low Yes

References

Description of CWE-337 on Mitre website