CWE-1327: Binding to an Unrestricted IP Address
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- ubiquiti inc wifiman desktop A malicious actor with access to the network could exploit a Binding to an Unrestricted IP... 7.5 High
- openhands software agent sdk OpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE 9.3 Critical
- ibm app connect enterprise IBM App Connect Enterprise is vulnerable to a credential exposure 9.8 Critical
- llama-farm llamafarm LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces 7.2 High
- penpot, penpot @penpot/mcp +1 more Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge 5.3 Medium
- esphome device-builder ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces 8.8 High
- fastify-cli fastify-cli vulnerable to remote code execution via ignored explicit Inspector bind address 8.1 High
- cisco nx-os software Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability 9.8 Critical
- argoproj-labs argocd-mcp argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP 10.0 Critical
- cli GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default 2.1 Low
- ibm documentation offline IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution 4.3 Medium
- vps.org supabase template VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities 9.1 Critical
- broadcom spring tools, spring tools for eclipse +1 more Spring Tools Docker integration publishes unauthenticated debug (JDWP) and JMX ports on all network interfaces 8.0 High
- decolua 9router 9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF 8.2 High
- mervinpraison praisonaiagents PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in 9.8 Critical
- amd instinct™ mi210, instinct™ mi250, instinct™ mi250x +6 more +8 more Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a... 9.2 Critical
- golang gopls, golang.org/x/tools golang.org/x/tools/gopls +1 more Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls 8.8 High
- openclaw OpenClaw < 2026.4.10 - Chrome DevTools Protocol Exposure via Overly Broad CDP Relay Binding 9.0 Critical
- apache iotdb Apache IoTDB: Insecure Default Configuration Vulnerability 9.8 Critical
- openclaw OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl 6.3 Medium
- microsoft azure iot explorer Azure IoT Explorer Information Disclosure Vulnerability 6.5 Medium
- keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.4 +2 more Keycloak-server: debug default bind address 6.8 Medium
- automationdirect productivity suite, productivity 1000 p1-540 cpu, productivity 1000 p1-550 cpu +5 more +7 more AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327 9.3 Critical
- microsoft omniparser OmniParser Remote Code Execution Vulnerability 7.3 High
- protns actadur Remote Code Execution in ProTNS ActADUR 9.4 Critical
- acronis cyber protect 16, cyber protect +1 more Excessive attack surface in acep-collector service due to binding to an unrestricted IP address.... 3.5 Low
- acronis cyber protect 16, cyber protect +1 more Excessive attack surface in acep-importer service due to binding to an unrestricted IP address.... 3.5 Low
- acronis cyber protect 16, cyber protect +1 more Excessive attack surface in archive-server service due to binding to an unrestricted IP address.... 3.5 Low
- openprinting cups, cups-browsed +1 more cups-browsed binds to `INADDR_ANY:631`, trusting any packet from any source 5.3 Medium
- dbt-labs dbt-core dbt allows Binding to an Unrestricted IP Address via socketsocket 5.3 Medium
- honeywell experion server Server receiving a malformed message based on a list of IPs resulting in heap corruption causing... 5.9 Medium
- acronis agent, cyber protect 15, cyber protect +2 more Excessive attack surface due to binding to an unrestricted IP address. The following products are... 4.3 Medium
- illumina iscan control software, iscan firmware, iseq 100 +19 more +21 more CVE-2023-1968 10.0 Critical
- jetbrains pycharm In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was... 3.0 Low