CVE-2024-23688

MediumCVSS 5.3/10Last modified Jul 14, 2026

Description

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-323CWE-330

Affected software

No affected versions have been published.

Timeline

Published
Jan 19, 2024
Last modified
Jul 14, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-236898.8Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and com.clickhouse:clickhoCVE-2024-23695.4The Page Builder Gutenberg Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options before outputting theCVE-2024-236907.2The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated CVE-2024-236929.8Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows aCVE-2024-236957.8In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of CVE-2024-236967.8In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalatiCVE-2024-236977.8In RGXCreateHWRTData_aux of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalaCVE-2024-236987.8In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to lCVE-2024-237047.8In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due to a missing permissiCVE-2024-237057.8In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validation. This could leadCVE-2024-237067.8In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This could lead to local eCVE-2024-237077.8In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privi
CVE-2024-23688: Medium severity, CVSS 5.3 | Vulnix