VULNERABILITY INTELLIGENCE
CVE-2024-45751
CVSS score5.9 MEDIUM
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thus the sequence of challenges is always identical.
Weakness classification
- CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)