CWE-1240: CWE-1240
Yearly Trend
Top Affected Vendors
All CWE-1240 CVEs (7)
The B&R Automation Runtime FTP server supports outdated encryption protocols (SSLv3, TLSv1.0, TLS1.1) that are vulnerable to cryptographic attacks. A ...
Feb 5, 2024This vulnerability in Plonky2 allows a malicious prover to falsely prove that f(0)=0 for any lookup table f when the table length isn't divisible by 2...
Jan 30, 2025This vulnerability in Windows Cryptographic Services involves a risky implementation of a cryptographic primitive that allows an authenticated attacke...
Oct 14, 2025Dell CloudLink versions before 8.2 contain a cryptographic implementation vulnerability that allows high-privileged attackers to cause denial of servi...
Nov 5, 2025A timing side-channel vulnerability in RustCrypto's Signatures library allows attackers to potentially extract private key information during ML-DSA s...
Jan 10, 2026Apache StreamPark versions 2.0.0 through 2.1.6 use user passwords as JWT signing keys, allowing attackers who capture tokens to brute-force passwords ...
Dec 12, 2025This vulnerability in uTLS creates a fingerprint mismatch with Chrome when using GREASE ECH, potentially allowing network observers to detect and fing...
Feb 20, 2026About CWE-1240 (CWE-1240)
Our database tracks 7 CVEs classified as CWE-1240, with 1 rated critical and 2 rated high severity. The average CVSS score for CWE-1240 vulnerabilities is 7.2.
External reference: View CWE-1240 on MITRE CWE →
Monitor CWE-1240 Vulnerabilities
Get alerted when new CWE-1240 CVEs affect your infrastructure.
Start Monitoring Free