Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1204: Generation of Weak Initialization Vector (IV)

Base Incomplete

The product uses a cryptographic primitive that uses an Initialization
Vector (IV), but the product does not generate IVs that are
sufficiently unpredictable or unique according to the expected
cryptographic requirements for that primitive.

More detail

By design, some cryptographic primitives
(such as block ciphers) require that IVs
must have certain properties for the
uniqueness and/or unpredictability of an
IV. Primitives may vary in how important
these properties are.

How to prevent it (1 mitigation)

  1. Implementation

    Different cipher
    modes have different requirements for
    their IVs. When choosing and implementing
    a mode, it is important to understand
    those requirements in order to keep
    security guarantees intact. Generally, it
    is safest to generate a random IV, since
    it will be both unpredictable and have a
    very low chance of being non-unique. IVs
    do not have to be kept secret, so if
    generating duplicate IVs is a concern, a
    list of already-used IVs can be kept and
    checked against.

    NIST offers recommendations on generation of IVs for modes of which they have approved. These include options for when random IVs are not practical. For CBC, CFB, and OFB, see [REF-1175]; for GCM, see [REF-1178].

Source: MITRE CWE-1204

All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.5
    CVE-2026-8374

    Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

    Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol.

    SwitchBot SwitchBot App SwitchBot Lock Wifi SwitchBot Lock Lite
  • High 7.5
    CVE-2026-5087

    PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

    PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems withou…

    JJNAPIORK PAGI::Middleware::Session::Store::Cookie
  • High 8.7
    CVE-2026-25998

    strongMan vulnerable to private credential recovery due to key and counter reuse

    strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strongMan encrypts the corresponding database fields. So far it used AES in CTR mode with a global databas…

    strongSwan strongMan
  • Medium 6.5
    CVE-2025-0714

    Insecure storage of sensitive information in MobaXTerm <25.0.

    The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt each password individually. In the default configuration, on …

    Mobatek MobaXterm
  • High 7.5
    CVE-2022-26083

    Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may all…

  • Low 3.1
    CVE-2023-2747

    Uninitialized IV in Silicon Labs SE FW v2.0.0 through v 2.2.1 for internally stored data

    The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.

    silabs.com GSDK