CWE-300: Channel Accessible by Non-Endpoint
The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.
Also known as Adversary-in-the-Middle / AITM, Attacker-in-the-Middle / AITM, Man-in-the-Middle / MITM.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- signalwire freeswitch FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server 7.4 High
- zhonglun cloudpos Zhonglun CloudPOS Automatic Update Program.cs channel accessible 6.3 Medium
- arubanetworks analytics and location engine, hewlett packard enterprise (hpe) ale +1 more Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE) 7.1 High
- eclipse foundation ditto In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto... 9.2 Critical
- morequick mqac-7620, mqac-7620a, mqap-7620 +12 more +14 more Zbtlink MQWrt yunmgrd Cloud C2 Implant 9.3 Critical
- No product listed CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack. 7.1 High
- ghost robotics vision 60 Multiple vulnerabilities in Ghost Robotics' Vision 60 8.7 High
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 more Security Boundary Bypass via Routing Node Impersonation 4.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 more Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation 4.3 Medium
- arubanetworks arubaos, hewlett packard enterprise (hpe) hpe aruba networking wireless operating systems (aos-8 & aos-10) +1 more Cross-BSSID GTK Re-encryption and Traffic Injection 4.3 Medium
- waveshare rs232\/485 to wifi eth \(b\) firmware A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet... 7.5 High
- siemens sinec traffic analyzer A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions)... 7.5 High
- localsend LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception 9.3 Critical
- fortinet fortios, fortiproxy +1 more A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0... 5.6 Medium
- apple ipados, ios and ipados, iphone os +2 more This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and... 8.1 High
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability 7.8 High
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 more A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in... 3.0 Low
- ibm cloud pak system IBM Cloud Pak System information disclosure 5.9 Medium
- tecno com.transsnet.store The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which... 8.1 High
- 2n access commander 2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle... 8.1 High
- huawei harmonyos Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of... 6.2 Medium
- No product listed Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to... 8.1 High
- ibm sterling b2b integrator IBM Sterling B2B Integrator information disclosure 5.3 Medium
- lizardbyte sunshine Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client 6.5 Medium
- ibm sdk, java technology edition, java sdk +1 more IBM SDK, Java Technology Edition denial of service 5.9 Medium
- nltk ntlk unsafe deserialization vulnerability 9.8 Critical
- f5 big-ip next central manager BIG-IP Next Central Manager vulnerability 7.4 High
- ethos ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man... 9.1 Critical
- easymine easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which... 5.6 Medium
- jstnmcbrd dectalk-tts Use of Unencrypted HTTP Request in dectalk-tts 8.2 High
- ibm cloud pak for security, qradar suite products, qradar suite +2 more IBM QRadar Suite information dislosure 5.9 Medium
- ibm security verify access appliance, security verify access docker, security verify access +2 more IBM Security Access Manager Container gain access 8.3 High
- systemd project systemd, red hat cryostat 2, enterprise linux 8 +2 more +4 more Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes 5.9 Medium
-
github.com/edgelesssys/marblerunGo Go package github.com/edgelesssys/marblerun CLI commands susceptible to MITM attacks No score - softether vpn An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of... 7.8 High
- open5gs Multiple vulnerabilities in Open5GS 6.5 Medium
- cbot core, panel, chatbot +2 more Channel Accessible by Non-Endpoint in CBOT's Chatbot 8.1 High
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 more Channel Accessible by Non-Endpoint 6.8 Medium
- hcl software verse for android, hcltech verse +1 more An SSL certificate host verification vulnerability affects HCL Verse for Android 6.3 Medium
- juniper junos, juniper networks junos os +1 more Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL 6.5 Medium
- anker eufy homebase 2 firmware An authentication bypass vulnerability exists in the process_msg() function of the home_security... 7.7 High
- juniper junos, juniper networks junos os +1 more Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks. 5.3 Medium
- eclipse equinox, the eclipse foundation eclipse equinox +1 more In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021),... 8.1 High
- rockwellautomation micro800 firmware, micrologix 1400 firmware +1 more When an authenticated password change request takes place, this vulnerability could allow the... 7.5 High
- ui edgemax edgerouter firmware A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to... 7.5 High
- haxx libcurl, broadcom fabric operating system, debian linux +11 more +13 more curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to... 3.7 Low
-
ezseed-transmissionnpm Insecure Defaults Leads to Potential MITM in ezseed-transmission 4.2 Medium - red hat containernetworking/plugins, fedoraproject fedora, linuxfoundation cni network plugins +2 more +4 more containernetworking/plugins vulnerable to MitM attacks 6.0 Medium
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 more Missing SSH host key validation in Jenkins Amazon EC2 Plugin 5.6 Medium
- moonlight-stream moonlight Man-in-the-middle attack in Moonlight iOS/tvOS 6.1 Medium
- Show olderLoading…