CWE-336 Same Seed in Pseudo-Random Number Generator (PRNG)

variant

A Pseudo-Random Number Generator (PRNG) uses the same seed each time the product is initialized.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (6)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-42810UShigh7.8—
A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.
CVE-2007-3308UShigh7.5—
Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows remote attackers to pass the CAPTCHA te…
CVE-2012-6661USmedium5.0—
Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it easier for remote attackers to g…
CVE-2000-0535USmedium5.0OT elevated—
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes th…
CVE-2026-6924US——
A bug in the entropy initialization for SiWx917 causes the DRBG to use a predictable seed. As such, all random numbers generated in the Matter code use the same stream of numbers.…
CVE-2026-24044US——
Element Server Suite Community Edition (ESS Community) deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initi…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan