CWE-323 · Reusing a Nonce, Key Pair in Encryption

47 CVEs classified under CWE-323 (Reusing a Nonce, Key Pair in Encryption). Browse by severity and year.

Top CVEs for CWE-323
CVESeverityScorePublishedSummary
CVE-2017-7902Critical9.82017-06-30A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AW…
CVE-2026-59099Critical9.12026-07-02Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state b…
CVE-2026-12205Critical9.12026-06-15Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce…
CVE-2026-49952Critical9.12026-06-15Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthoriz…
CVE-2025-64767Critical9.12025-11-21hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a…
CVE-2022-24401High8.82023-10-19Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame c…
CVE-2025-47345High8.42026-01-07Cryptographic issue may occur while encrypting license data.
CVE-2026-3559High8.12026-03-16Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass…
CVE-2017-13082High8.12017-10-17Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BS…
CVE-2026-55967High7.52026-06-25AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter…
CVE-2026-25998High7.52026-02-19strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strong…
CVE-2026-81020High7.42026-08-28wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL…
CVE-2026-81019High7.42026-08-28wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every…
CVE-2026-50577High7.42026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3…
CVE-2025-59870High7.42026-01-16HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a secur…
CVE-2026-21383High7.12026-07-06Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVE-2026-5446High7.12026-04-09In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt…
CVE-2023-7003Medium6.82024-03-15The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other lo…
CVE-2023-4680Medium6.82023-09-15HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The…
CVE-2023-37467Medium6.82023-07-28Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce…
All CVEs classified under CWE-323 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-81341Medium6.52026-08-28wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number car…
CVE-2026-81020High7.42026-08-28wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL…
CVE-2026-81019High7.42026-08-28wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every…
CVE-2026-50577High7.42026-08-18ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3…
CVE-2026-175782026-08-05Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encry…
CVE-2026-21383High7.12026-07-06Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
CVE-2026-59099Critical9.12026-07-02Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state b…
CVE-2026-136022026-07-01We found a chain of combining multiple weaknesses in the product that could allow an attacker to become any user in the backend and access any data: *…
CVE-2026-56369Low3.72026-06-30ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can explo…
CVE-2026-55967High7.52026-06-25AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter…
CVE-2026-12205Critical9.12026-06-15Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce…
CVE-2026-49952Critical9.12026-06-15Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthoriz…
CVE-2026-45028Medium6.12026-05-13Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the confidentiality and integrity of server island props and slots…
CVE-2026-5446High7.12026-04-09In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt…
CVE-2026-3559High8.12026-03-16Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass…
CVE-2026-3099Medium5.82026-03-12A flaw was found in Libsoup. The server-side digest authentication implementation in the SoupAuthDomainDigest class does not properly track issued nonces or en…
CVE-2026-30785Medium5.52026-03-05Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerab…
CVE-2026-25998High7.52026-02-19strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the database (private keys, EAP secrets), strong…
CVE-2025-59870High7.42026-01-16HCL MyXalytics  is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a secur…
CVE-2025-47345High8.42026-01-07Cryptographic issue may occur while encrypting license data.
CVE-2025-617392025-12-22Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.
CVE-2025-64767Critical9.12025-11-21hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a…
CVE-2025-46632Medium6.52025-05-01Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easil…
CVE-2022-37660Medium6.52025-02-11In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with…
CVE-2024-11022Medium5.62024-12-06The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used…
CVE-2024-21530Medium4.52024-10-02Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequential…
CVE-2024-41951Medium4.42024-07-31Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/deco…
CVE-2024-36289Medium5.32024-06-17Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is…
CVE-2024-36121Medium5.92024-06-04 netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this s…
CVE-2023-7003Medium6.82024-03-15The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other lo…
CVE-2024-23688Medium5.32024-01-19Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's p…
CVE-2022-24401High8.82023-10-19Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator. IV generation is based upon several TDMA frame c…
CVE-2023-4680Medium6.82023-09-15HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The…
CVE-2023-37467Medium6.82023-07-28Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce…
CVE-2023-28997Medium6.72023-04-04The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server a…
CVE-2021-32791Medium5.92021-07-26mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating use…
CVE-2020-1759Medium6.42020-04-13A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure…
CVE-2019-7593Medium6.82019-08-20Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management…
CVE-2017-13088Medium5.32017-10-17Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network…
CVE-2017-13086Medium6.82017-10-17Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an atta…
CVE-2017-13084Medium6.82017-10-17Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an…
CVE-2017-13082High8.12017-10-17Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BS…
CVE-2017-13081Medium5.32017-10-17Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshak…
CVE-2017-13080Medium5.32017-10-17Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio r…
CVE-2017-13079Medium5.32017-10-17Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake…
CVE-2017-13078Medium5.32017-10-17Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio ra…
CVE-2017-7902Critical9.82017-06-30A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AW…