CWE-311 敏感数据加密缺失 类弱点 270 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-311指敏感数据在存储或传输过程中缺乏加密保护的安全漏洞。攻击者常通过窃听网络流量或非法访问存储介质，直接读取明文敏感信息，导致数据泄露。开发者应避免此风险，确保对密码、个人身份信息等关键数据实施强加密算法，并在传输时采用TLS等安全协议，以保障数据的机密性与完整性。
function persistLogin($username, $password){ $data = array("username" => $username, "password"=> $password); setcookie ("userdata", $data); }server.sin_family = AF_INET; hp = gethostbyname(argv[1]); if (hp==NULL) error("Unknown host"); memcpy( (char *)&server.sin_addr,(char *)hp->h_addr,hp->h_length); if (argc < 3) port = 80; else port = (unsigned short)atoi(argv[3]); server.sin_port = htons(port); if (connect(sock, (struct sockaddr *)&server, sizeof server) < 0) error("Connecting"); ... while ((n=read(sock,buffer,BUFSIZE-1))!=-1) { write(dfd,password_buffer,n); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-40366 | Siemens Climatix POL909 安全漏洞 — Climatix POL909 (AWB module) | 7.4 | - | 2021-11-09 |
| CVE-2021-28496 | Arista Networks Arista EOS 安全漏洞 — Arista EOS | 5.7 | Medium | 2021-10-21 |
| CVE-2021-31386 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 5.3 | Medium | 2021-10-19 |
| CVE-2021-41302 | Ecoa Bas controller 安全漏洞 — ECS Router Controller ECS (FLASH) | 7.3 | High | 2021-09-30 |
| CVE-2021-22932 | Citrix Systems Citrix ShareFile 处理逻辑错误漏洞 — Citrix ShareFile Storage Zones Controller | 8.2 | - | 2021-08-16 |
| CVE-2021-32001 | SUSE Rancher K3s 安全漏洞 — Rancher | 6.5 | Medium | 2021-07-28 |
| CVE-2021-33900 | Apache Directory Studio 安全漏洞 — Apache Directory Studio | 7.5 | - | 2021-07-26 |
| CVE-2021-22782 | Schneider Electric EcoStruxure Control Expert 安全漏洞 — EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions | 5.5 | - | 2021-07-14 |
| CVE-2018-19944 | QNAP Systems TS-870 安全漏洞 — QTS | 7.5 | - | 2020-12-31 |
| CVE-2020-28217 | Schneider Electric Easergy T300 访问控制错误漏洞 — Easergy T300 (firmware 2.7 and older) | 7.5 | - | 2020-12-11 |
| CVE-2020-28216 | Schneider Electric Easergy T300 安全漏洞 — Easergy T300 (firmware 2.7 and older) | 7.5 | - | 2020-12-11 |
| CVE-2020-7567 | Schneider Electric Modicon M221 安全漏洞 — Modicon M221, all references, all versions | 5.7 | - | 2020-11-19 |
| CVE-2020-10039 | Siemens SICAM MMU、SGU和T 安全漏洞 — SICAM MMU | 8.1 | - | 2020-07-14 |
| CVE-2019-18254 | Biotronik CardioMessenger II-S 安全漏洞 — BIOTRONIK CardioMessenger II-S T-Line, CardioMessenger II-S GSM | 4.6 | - | 2020-06-29 |
| CVE-2020-12032 | Baxter ExactaMix EM2400和EM1200 安全漏洞 — Baxter ExactaMix EM 2400 & EM 1200 | 9.1 | - | 2020-06-29 |
| CVE-2020-10273 | MiR controllers 安全漏洞 — MiR100 | 7.5 | - | 2020-06-24 |
| CVE-2020-12801 | LibreOffice 安全漏洞 — LibreOffice | 8.2 | - | 2020-05-18 |
| CVE-2020-10267 | Universal Robots UR3、UR5和UR10 安全漏洞 — UR3, UR5 and UR10 | 6.5 | - | 2020-04-06 |
| CVE-2019-13922 | Siemens SINEMA Remote Connect Server 安全漏洞 — SINEMA Remote Connect Server | 4.9 | - | 2019-09-13 |
| CVE-2019-13419 | floragunn Search Guard 信息泄露漏洞 — Search Guard | 7.5 | - | 2019-08-13 |
| CVE-2019-13418 | floragunn Search Guard 输入验证错误漏洞 — Search Guard | 7.5 | - | 2019-08-12 |
| CVE-2019-5448 | Yarn 加密问题漏洞 — yarn | 8.1 | - | 2019-07-30 |
| CVE-2019-6526 | 多款Moxa产品加密问题漏洞 — IKS, EDS | 9.8 | - | 2019-04-12 |
| CVE-2018-16879 | Ansible Tower 信息泄露漏洞 — Tower | 9.4 | - | 2019-01-03 |
| CVE-2018-18984 | Medtronic CareLink 9790 Programmer、CareLink 2090 Programmer和29901 Encore Programmer 加密问题漏洞 — CareLink 9790 Programmer | 4.6 | Medium | 2018-12-14 |
| CVE-2018-17915 | Xiongmai XMeye P2P Cloud Server 安全漏洞 — XMeye P2P Cloud Server | 9.8 | - | 2018-10-10 |
| CVE-2018-4855 | Siemens SICLOCK TC100和SICLOCK TC400 安全漏洞 — SICLOCK TC100, SICLOCK TC400 | 5.7 | - | 2018-07-03 |
| CVE-2016-10697 | react-native-baidu-voice-synthesizer 安全漏洞 — react-native-baidu-voice-synthesizer node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10696 | windows-latestchromedriver 安全漏洞 — windows-latestchromedriver node module | 8.1 | - | 2018-06-04 |
| CVE-2016-10695 | npm-test-sqlite3-trunk 安全漏洞 — npm-test-sqlite3-trunk node module | 8.1 | - | 2018-06-04 |
CWE-311（敏感数据加密缺失） 是常见的弱点类别，本平台收录该类弱点关联的 270 条 CVE 漏洞。