standard

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

Common Weakness Enumeration class for reliance on cryptography weak enough to be defeated by available computation, such as password hashes that can be brute-forced.

Known aliases

CWE-327

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

A hard-coded key opens any PIMBoards project file an attacker can read

CISA's advisory covers four CVEs in AVEVA Pipeline Integrity Monitor builds up to 2025 SP1 P1. The fix reaches only the project files you can migrate, and the migration to SP1 P2 cannot be undone.

Publishers:cisa.gov

Reality

Evidence62
Adoption18
Hype gap+5
Incentives55
Confidence58