CWE-337 - Predictable Seed in Pseudo-Random Number Generator (PRNG)

Description

A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.






Latest vulnerabilities for CWE-337

Multiple vulnerabilities in Intel RAID Web Console software 2024-10-03
Medium No
Account takeover in AdaCore aws 2024-09-27
High No
Use of insufficiently random values in Qt Network Authorization 2024-05-28
Medium Yes
Multiple vulnerabilities in Mozilla Firefox 2024-05-15
High Yes
Predictable Seed in Pseudo-Random Number Generator in Mitsubishi Electric MELSEC iQ-F, iQ-R Series 2023-01-18
Medium Yes Public exploit

References

Description of CWE-337 on Mitre website