Skip to content
OpenAdvisories

Weakness (CWE)

CWE-334: Small Space of Random Values

Base Draft

The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.

How to prevent it (1 mitigation)

  1. Architecture and Design, Requirements

    Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems. Consult FIPS 140-2 Annex C ("Approved Random Number Generators").

Source: MITRE CWE-334

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.4
    CVE-2026-122118

    In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK wit…

    Yealink UVC40 E2 MeetingBar A40 AVHub
  • High 8.8
    CVE-2022-24402

    Intentionally weakened effective strength in TETRA TEA1

    The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.

    ETSI TETRA Standard
  • High 7.5
    CVE-2022-22517

    Communication Components in multiple CODESYS products vulnerable to communication channel disruption

    An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

    CODESYS CODESYS Control for PFC200 SL CODESYS Control for Raspberry Pi SL CODESYS Control for BeagleBone SL Linux Windows Browsers ICS / OT
  • High 7.7
    CVE-2021-21955

    An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binar…

  • High 7.1
    CVE-2020-7566

    A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could …