Weakness (CWE)

CWE-323: Reusing a Nonce, Key Pair in Encryption

Base Incomplete

Nonces should be used for the present occasion and only once.

How to prevent it (2 mitigations)

Implementation

Refuse to reuse nonce values.
Implementation

Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Source: MITRE CWE-323

All Critical High Medium Low Exploited only Public exploit

52 results · Feed

Medium 6.4

CVE-2020-1759

A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vu…

The Ceph Project ceph ceph ceph Debian Alpine

Apr 13, 2020
High 8.6

CVE-2020-2099

Inbound TCP Agent Protocol/3 authentication bypass in Jenkins

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be u…

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven

Jan 29, 2020
Medium 6.8

CVE-2019-7593

Metasys use of shared RSA key pairs

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).

Johnson Controls Metasys versions prior to 9.0

Aug 20, 2019
Unscored —

CVE-2017-13080

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux linux-firmware Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13088

Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (I…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13082

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (P…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13078

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handsha…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13084

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) d…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa Debian

Oct 17, 2017
Unscored —

CVE-2017-13086

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) dur…

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13081

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) linux-firmware wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) wpa wpa Debian Ubuntu Alpine

Oct 17, 2017
Unscored —

CVE-2017-7902

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 p…

Jun 30, 2017