VULNERABILITY INTELLIGENCE
CVE-2013-7373
CVSS score7.5 HIGH
EPSS probability1.19%
CISA KEVNot currently listed
Published2014-04-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor