What’s Vulnerable › Vulnerabilities

CVE-2002-20002

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-01-02 · updated 2026-06-16
• Weakness: CWE-338

Description

The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.

References

• https://github.com/briandfoy/cpan-security-advisory/issues/184
• https://metacpan.org/release/MNAGUIB/EasyTCP-0.15/view/EasyTCP.pm
• https://metacpan.org/release/MNAGUIB/EasyTCP-0.26/changes

Get alerted when CVE-2002-20002 or the next vulnerability affects your stack