Cyber Resilience

CWE · MITRE source

CWE-1241Use of Predictable Algorithm in Random Number Generator

Abstraction: Base · CVEs in our corpus: 10

The device uses an algorithm that is predictable and generates a pseudo-random number.

Pseudo-random number generator algorithms are predictable because their registers have a finite number of possible states, which eventually lead to repeating patterns. As a result, pseudo-random number generators (PRNGs) can compromise their randomness or expose their internal state to various attacks, such as reverse engineering or tampering.

Last updated: 21 August 2026 20:21 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 5 mapping(s) from 3 framework(s): STIG oracle linux 8 2 (mostly) · STIG rhel 8 2 (mostly) · CAPEC 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A04:2025 Cryptographic Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SC-12 Cryptographic Key Establishment and Management
  • SC-13 Cryptographic Protection
  • SA-8 Security and Privacy Engineering Principles
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 5 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V6.5.3
  • V7.2.3
  • V11.5.1
  • V11.5.2

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2016-10180 6.47.50.04412017-01-30
CVE-2021-3689 6.27.50.01902021-08-10
CVE-2023-4695 6.28.10.00602023-09-01
CVE-2026-26018 6.17.50.01122026-03-06
CVE-2021-3692 4.85.30.01702021-08-10
CVE-2026-6420 4.66.30.00122026-05-06
CVE-2026-73576 4.56.30.00192026-08-13
CVE-2025-13079 4.45.30.00372026-02-19
CVE-2025-32056 3.24.00.00282026-01-22