Draft in the CWE catalog · 16 CVEs mapped
A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.
HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG)
A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the pairing token and read or modify router settings via observed values from an administrator-initiated IFTTT pairing session.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for more information.
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.