CVE-2021-34600
Telenot complex: Insecure AES Key Generation
- State
- Published
- Severity
- 5.5 Medium
- Published
- Jan 20, 2022
- Updated
- Sep 16, 2024
- Reserved
- Jun 10, 2021
Description
Telenot CompasX versions prior to 32.0 use a weak seed for random number generation leading to predictable AES keys used in the NFC tags used for local authorization of users. This may lead to total loss of trustworthiness of the installation.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CERTVDE |
Weaknesses
- CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Affected Products
| Product | Versions |
|---|---|
CompasXTelenot Electronic GmbH |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.