CVE-2024-47126

HIGH Year: 2024
CVSS v3 Score
8.8
High
Weakness Type
CWE-338
View all →

Vulnerability Description

The goTenna Pro App does not use SecureRandom when generating passwords for sharing cryptographic keys. The random function in use makes it easier for attackers to brute force this password if the broadcasted encryption key is captured over RF. This only applies to the optional broadcast of an encryption key, so it is advised to share the key with local QR code for higher security operations.

Related Vulnerabilities

CVE-2017-8081

HIGH
CVSS:8.8(High)

Poor cryptographic salt initialization in admin/inc/template_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate privileges to an arbitrary user or conduct CSRF attacks via cal...

CWE-3382017

CVE-2022-26943

HIGH
CVSS:8.8(High)

The Motorola MTM5000 series firmwares generate TETRA authentication challenges using a PRNG using a tick count register as its sole entropy source. Low boottime entropy and limited re-seeding of the p...

CWE-3382022

CVE-2022-45782

HIGH
CVSS:8.8(High)

An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generation leads to account...

CWE-3382022

CVE-2023-24828

HIGH
CVSS:8.8(High)

Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate access token and password reset keys was not cryptographically secure. Existing nor...

CWE-3382023

CVE-2025-1828

HIGH
CVSS:8.8(High)

Crypt::Random Perl package 1.05 through 1.55 may use rand() function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entrop...

CWE-3382025

CVE-2018-16115

CRITICAL
CVSS:9.1(Critical)

Lightbend Akka 2.5.x before 2.5.16 allows message disclosure and modification because of an RNG error. A random number generator is used in Akka Remoting for TLS (both classic and Artery Remoting). Ak...

CWE-3382018