Pwgen Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pwgen Project records in CISA KEV

No Pwgen Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pwgen 3 records MEDIUM

Records

3 records

TI-2013-03894 CVE-2013-4441 · GHSA-gf35-787v-rv28

Missing brute-force protection in Pwgen

MEDIUM 47

The Phonemes mode in Pwgen 2.06 generates predictable passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0236 Published 2020-01-27 No fix listed CWE-307

TI-2013-03895 CVE-2013-4442 · GHSA-gfx4-cf3g-8q5m

Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when…

LOW 27

Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02166 Published 2014-12-19 No fix listed CWE-310

TI-2013-03893 CVE-2013-4440 · GHSA-62pg-hjc9-8wrw

Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes…

LOW 27

Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01845 Published 2014-12-19 No fix listed CWE-255

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0