CWE-323.

Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

• NLnet Labs Krill
• CWE-323

Packet CTR reports a full success length after the counter is exhausted

• Legion of the Bouncy Castle Inc. BC-LTS-JAVA
• CWE-323

AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

• zephyr
• Race condition
• CWE-323

wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

• wolfSSL Inc. wolfEngine
• CWE-323

wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

• wolfSSL Inc. wolfEngine
• CWE-323

wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

• wolfSSL Inc. wolfProvider
• CWE-323

ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

• fbeta-GmbH ePA3-Service-OpenSource
• CWE-323

Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

• Kong Event Gateway
• CWE-323

Reusing a Nonce, Key Pair in Encryption in HLOS

• Qualcomm, Inc. Snapdragon
• CWE-323

Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

• apereo cas
• CWE-323

Session takeover vulnerability

• pretix
• pretix-mollie
• CWE-20
• CWE-323

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

• wolfSSL
• CWE-323

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

• TIMLEGGE Crypt::DSA
• CWE-323

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

• Discuz! X5.0
• CWE-323

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

• Weak cryptography or TLS
• CWE-323

<14.12.0 · fixed in 14.12.0

Astro: Server island encrypted parameters vulnerable to cross-component replay

• Cross-site scripting (XSS)
• CWE-323

<6.1.10 · fixed in 6.1.10

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

• Weak cryptography or TLS
• CWE-323

>=1.59, <=1.80.1 || >=1.82, <1.84 · fixed in 1.84

wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse

• wolfSSL
• CWE-323

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

• Philips Hue Bridge
• CWE-323

Libsoup: libsoup: authentication bypass via digest authentication replay attack

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• CWE-323

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

• rustdesk-client RustDesk Client
• Weak cryptography or TLS
• Prototype pollution

strongMan vulnerable to private credential recovery due to key and counter reuse

• strongswan strongMan
• CWE-323
• CWE-1204

Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

• HCL Software MyXalytics
• CWE-323

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

• Qualcomm, Inc. Snapdragon
• CWE-323

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

• Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG
• CWE-323

@hpke/core reuses AEAD nonces

• CWE-323

<1.7.5 · fixed in 1.7.5

Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between cli…

• CWE-323

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association.

• CWE-323

SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack

• SICK AG SICK InspectorP61x
• SICK AG SICK InspectorP62x
• CWE-323

Duplicate Advisory: cocoon Reuses a Nonce, Key Pair in Encryption

• CWE-323

<0.4.0 · fixed in 0.4.0

HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

• CWE-323

>=1.6.0, <1.12.11 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.3 · fixed in 1.12.11, 1.13.7, 1.14.3

PheonixAppAPI has visible Encoding Maps

• CWE-323

<0.2.5 · fixed in 0.2.5

Withdrawn: SFTPGo's JWT implmentation lacks certain security measures

• Broken access control
• CWE-323

<=2.6.2 · no fixed version yet

Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS.

• FreeFrom K.K. "FreeFrom - the nostr client" App for Android
• FreeFrom K.K. "FreeFrom - the nostr client" App for iOS
• CWE-323

BoringSSLAEADContext in Netty Repeats Nonces

• Memory corruption
• Information disclosure

>=0.0.3.Final, <0.0.11.Final · fixed in 0.0.11.Final

CVE-2023-7003

• Sciener Kontrol Lux
• CWE-323

Duplicate Advisory: Discovery uses the same AES/GCM Nonce throughout the session

• Weak cryptography or TLS
• CWE-323

<0.4.5 · fixed in 0.4.5

Keystream recovery for arbitrary frames in TETRA

• ETSI TETRA Standard
• CWE-323

Discourse CSP nonce reuse vulnerability for anonymous users

• discourse
• CWE-323

Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files

• nextcloud security-advisories
• CWE-323

Inbound TCP Agent Protocol/3 authentication bypass in Jenkins

• Weak cryptography or TLS
• CWE-323

<2.204.2 || >=2.205, <2.214 · fixed in 2.204.2, 2.214

Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc

• zmartzone mod_auth_openidc
• Weak cryptography or TLS
• CWE-323

Discovery uses the same AES/GCM Nonce throughout the session

• Weak cryptography or TLS
• CWE-323

<0.4.5 · fixed in 0.4.5

ceph: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

• ceph
• CWE-323

Metasys use of shared RSA key pairs

• Johnson Controls Metasys versions prior to 9.0
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…

• Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2)
• CWE-323

A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and pri…

• Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400
• CWE-323