CWE-345: Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Improper Token Verification7.3 High
- amd 1st gen epyc, 2nd gen epyc, epyc 7001 firmware +40 more +42 moreInsufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret...6.5 Medium
- amd 3rd gen epyc, epyc 7003 firmware, epyc 72f3 firmware +22 more +24 moreInsufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a...4.4 Medium
- nvidia gpu display driver for windows, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an...7.0 High
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreEmerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware...7.8 High
- codeigniter, codeigniter4 +1 moreCodeIgniter is vulnerable to IP address spoofing when using proxy7.0 High
- netgear wnr2000 firmwareAn issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a...4.8 Medium
- tp-link tl-wr940n v4 firmwareTP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of...6.5 Medium
- dlink dap-2310 firmware, dap-2330 firmware, dap-2360 firmware +6 more +8 moreD-Link devices DAP-2310 v2.10rc036 and earlier, DAP-2330 v1.06rc020 and earlier, DAP-2360 v2...7.5 High
- bigbluebuttonBigBlueButton subject to Ineffective user bans4.3 Medium
- paxtechnology paydroidPAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows root privileged attackers to...6.0 Medium
- bigbluebuttonBigBlueButton contains DoS via failed authToken validation4.3 Medium
- rsjoomla rsfirewall\!, rsjoomla! rsfirewall! +1 moreRSFirewall < 1.1.25 - IP Block Bypass9.8 Critical
- apple icloud, icloud for windows, ipados +5 more +7 moreA logic issue was addressed with improved state management. This issue is fixed in Safari 16.2,...5.5 Medium
- samsung gear iconx pc managerInsufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager...7.1 High
- certifi, certifi python-certifi, netapp e-series performance analyzer +2 more +4 moreRemoval of TrustCor root certificate6.8 Medium
- msi centerAn issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to...8.8 High
- etm-s ondiskplayeragentOndiskPlayer Remote Code Execution Vulnerability7.8 High
- codenotary immudbLack of proper validation in immudb5.8 Medium
- codenotary immudbimmundb has insufficient verification of data authenticity5.4 Medium
- etic telecom remote access server (ras), etictelecom remote access server firmware +1 moreETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity7.6 High
- palo alto networks cortex xsoarCortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine6.7 Medium
- citrix application delivery controller firmware, gateway, citrix adc, gateway +2 moreRemote desktop takeover via phishing8.3 High
- hewlett packard enterprise (hpe) hpe nimble storage hybrid flash arrays; nimble storage secondary flash arrays, hpe hf20 firmware, hf20c firmware +7 more +9 moreInsufficient Verification of Data Authenticity vulnerability in Hewlett Packard Enterprise HPE...8.0 High
- fortinet fortimail, fortios, antivirus engine +1 more +3 moreAn insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient,...4.7 Medium
- robustel r1510, r1510 firmware +1 moreA firmware update vulnerability exists in the sysupgrade functionality of Robustel R1510 3.1.16...6.7 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm fs-05 firmware, logo\! 8 bm firmware +2 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- github.com/peterzen/goresolver, go-resolver project go-resolver +1 moreIncorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver7.5 High
- github.com/peterzen/goresolver, go-resolver project go-resolver +1 moreIncorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver6.5 Medium
- hashicorp boundaryHashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the...9.9 Critical
- google androidIn SettingsActivity.java, there is a possible way to make a device discoverable over Bluetooth,...5.5 Medium
- patlite nbm-d88n firmware, nhl-3fb1 firmware, nhl-3fv1n firmware +2 morePatlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during...8.8 High
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353...5.9 Medium
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345...4.7 Medium
- zoom meetings, zoom video communications inc client for meetings for macos +1 moreLocal Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS8.8 High
- emerson controlwave micro firmware, controlwave pac firmware +1 moreThe Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity....7.8 High
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a...5.3 Medium
- emerson dl8000 firmware, fb3000 rtu firmware, roc800l firmware +2 more +4 moreThe Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThe recovery module has a vulnerability of bypassing the verification of an update package before...7.5 High
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient...9.8 Critical
- mozilla firefoxWhen loading a script with Subresource Integrity, attackers with an injection capability could...4.3 Medium
- motorola ace1000 firmwareMotorola ACE1000 RTUs through 2022-05-02 mishandle application integrity. They allow for custom...8.8 High
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity. It utilizes either the...7.2 High
- motorolasolutions mdlcThe Motorola MDLC protocol through 2022-05-02 mishandles message integrity. It supports three...9.8 Critical
- jtekt nano 10gx tuc-1157 firmware, nano cpu tuc-6941 firmware, pc10b-p tcc-6373 firmware +14 more +16 moreJTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the...9.8 Critical
- mod wsgi wsgi, debian linux, modwsgi mod wsgi +2 moreIncorrect header handling in mod-wsgi7.5 High
- verizon lvskihp outdoorunit firmwareOn Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade...7.5 High
- schneider electric opc ua modicon communication module, x80 advanced rtu communication module, schneider-electric opc ua module for m580 firmware +1 more +3 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could cause...5.9 Medium
- sap se business objects, sap business objects business intelligence platform +1 moreDue to insufficient input validation, SAP Business Objects - version 420, allows an authenticated...5.4 Medium
- icedtea icedtea-webIt was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML...7.5 High
- Show moreLoading…