CWE-1241 - Use of Predictable Algorithm in Random Number Generator
- 摘要：Base
- 结构：Simple
- 状态：Draft
- 发布日期：2020-02-24
- 更新日期：2025-12-11
名称
Use of Predictable Algorithm in Random Number Generator
描述
The device uses an algorithm that is predictable and generates a pseudo-random number.
Pseudo-random number generator algorithms are predictable because their registers have a finite number of possible states, which eventually lead to repeating patterns. As a result, pseudo-random number generators (PRNGs) can compromise their randomness or expose their internal state to various attacks, such as reverse engineering or tampering.
常见后果
范围：Confidentiality
影响：Read Application Data