Consensys Discovery Nonce Reuse

published 2021-04-06 5 y ago modified 2026-11-08 25 h ago also EUVD-2024-21150 , GHSA-w3hj-wr2q-x83g

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 42%
public exploits: 0; none known

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.

Patch / fix

fixed in 2

maven tech.pegasys.discovery:discovery 0.4.5
consensys discovery 0.4.5

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 2 y ago (2024-01-22)

Exploit prediction

0.49% chance of exploitation in the next 30 days, higher than 42% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CISA ADP	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
maven	tech.pegasys.discovery:discovery	<0.4.5	0.4.5

Classification

Weakness

CWE-323 Reusing a Nonce, Key Pair in Encryption
CWE-330 Use of Insufficiently Random Values

References

github.com /ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g
vendor-advisory, web
github.com /advisories/GHSA-w3hj-wr2q-x83g
vendor-advisory, third-party-advisory
vulncheck.com /advisories/vc-advisory-GHSA-w3hj-wr2q-x83g
third-party-advisory, web
nvd.nist.gov /vuln/detail/CVE-2024-23688
advisory
github.com /ConsenSys/discovery
package

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary