---
id: CVE-2024-23688
title: >-
  Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for
  the entire session
summary: >-
  Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for
  the entire session. which should ideally be unique for every message. The
  node's private key isn't compromised, only the session key generated for
  specific peer…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cwe:
  - CWE-323
  - CWE-330
vendor: consensys
product: discovery
affected:
  - discovery < 0.4.5
patched:
  - discovery 0.4.5
published: '2024-01-19'
updated: '2026-07-14'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-23688'
references:
  - url: >-
      https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g
    label: disclosure@vulncheck.com
  - url: 'https://github.com/advisories/GHSA-w3hj-wr2q-x83g'
    label: disclosure@vulncheck.com
  - url: 'https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/ConsenSys/discovery/security/advisories/GHSA-w3hj-wr2q-x83g
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://github.com/advisories/GHSA-w3hj-wr2q-x83g'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://vulncheck.com/advisories/vc-advisory-GHSA-w3hj-wr2q-x83g'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00493
epssPercentile: 0.39797
ingestedAt: '2026-07-14T23:40:05.035Z'
---

## Overview

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't compromised, only the session key generated for specific peer communication is exposed.

## Affected

- `discovery < 0.4.5`

## Remediation

Upgrade past the affected range:

- `discovery 0.4.5`