CWE-334

15 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 4High 5Medium 6Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-122118
In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK with insufficient strength is used.…
Yealink · AVHub
High7.4
CVE-2026-71851
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
brix · crypto-js
Critical9.0
CVE-2024-54017
A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V11.0), SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 (CP300) (All…
Siemens · SIPROTEC 5 6MD84 (CP300)
Medium6.9
CVE-2025-3895
Low token entropy in MegaBIP
Jan Syski · MegaBIP
Critical9.1
CVE-2024-52616
Avahi: avahi wide-area dns predictable transaction ids
avahi · avahi
Medium5.3
CVE-2024-51720
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
BlackBerry · SecuSUITE
Medium4.8
CVE-2024-6890
Journyx Unauthenticated Password Reset Bruteforce
Journyx · Journyx (jtime)
Critical9.8
CVE-2023-6951
A Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI drones could allow a remote attacker to derive the WPA2 PSK key…
DJI · Mavic 3 Pro
Medium6.6
CVE-2022-24402
Intentionally weakened effective strength in TETRA TEA1
ETSI · TETRA Standard
High8.8
CVE-2023-39979
MXsecurity Authentication Bypass
Moxa · MXsecurity Series
Critical9.8