Skip to content
OpenAdvisories

Weakness (CWE)

CWE-757: Algorithm Downgrade

Class Incomplete Selection of Less-Secure Algorithm During Negotiation

A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used in a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

Source: MITRE CWE-757

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2020-10135 Public exploit

    Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks

    Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent att…

    Bluetooth BR/EDR linux-raspi2 linux-hwe Ubuntu