RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.