Dashboard / CVE-2024-23688

CVE-2024-23688

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0 < 0.4.5

References & Advisories (3)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.49%
Raw Score 0.004930
Percentile 42.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00493
2026-11-12
0.00493
2026-11-10
0.00493
2026-11-09
0.00493
2026-11-08
0.00493

Intelligence Sources

mitre ref →

External Links