CVE-2023-2747

MEDIUM Year: 2023
CVSS v3 Score
5.5
Medium
Weakness Type
CWE-1204
View all →

Vulnerability Description

The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.

Related Vulnerabilities

CVE-2025-0714

MEDIUM
CVSS:6.5(Medium)

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt ea...

CWE-12042025

CVE-2022-26083

HIGH
CVSS:7.5(High)

Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local...

CWE-12042022

CVE-2025-0714

MEDIUM
CVSS:6.5(Medium)

The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt ea...

CWE-12042025