CWE-354: Improper Validation of Integrity Check Value
The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- tenda cp3 firmwareMissing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00...7.5 High
- icepay rest-api-net, rest api +1 moreICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity check4.8 Medium
- heimdal project heimdal, samba +1 moreThe fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a...7.5 High
- microchip rn4870 firmwareAn issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can...6.5 Medium
- trendnet tv-ip651wi firmwareThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update...5.9 Medium
- ui af-2x firmwareThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update...5.9 Medium
- microchip bm70 firmware, bm71 firmware, bm78 firmware +6 more +8 moreThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2...6.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm fs-05 firmware, logo\! 8 bm firmware +2 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- netgear wpn824ext firmwareAn exploitable firmware modification vulnerability was discovered on the Netgear WPN824EXT WiFi...7.5 High
- netgear wpn824ext firmwareAn exploitable firmware downgrade vulnerability was discovered on the Netgear WPN824EXT WiFi...5.3 Medium
- freshworks freshservice agentFreshService Windows Agent < 2.11.0 and FreshService macOS Agent < 4.2.0 and FreshService Linux...8.1 High
- samsung kiesImproper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074...5.5 Medium
- samsung smart switch pcImproper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3...5.5 Medium
- qualys cloud agent for linuxAn issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full...7.3 High
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreECDSA signature malleability in OpenZeppelin Contracts7.9 High
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager 5.02 has Insufficient Verification of Data Authenticity....6.8 Medium
- samsung mobile usb driver windows installer for mobile phones, samsung android usb driver +1 moreImproper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for...5.5 Medium
- iliasIn ILIAS through 7.10, lack of verification when changing an email address (on the Profile Page)...4.3 Medium
- siemens scalance xm408-4c, scalance xm408-4c (l3 int.), scalance xm408-8c +39 more +41 moreA vulnerability has been identified in SCALANCE XM408-4C (All versions < V6.5), SCALANCE XM408-4C...7.5 High
- google android, mediatek, inc. mt6833, mt6853, mt6877, mt6885, mt6889, mt6983, mt6985, mt8167s, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8667, mt8675, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 +1 moreIn WIFI Firmware, there is a possible system crash due to a missing count check. This could lead...7.5 High
- phoenix contact rad-ism-900-en-bd, rad-ism-900-en-bd-bus, rad-ism-900-en-bd/b +3 more +5 moreRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT9.1 Critical
- theupdateframework go-tufNo protection against rollback attacks in go-tuf8.0 High
- f5 big-ip guided configuration (gc), big-ip guided configuration, big-ip (advanced waf, apm, asm) +3 more +5 moreOn all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF,...8.7 High
- zoom meetings, zoom video communications inc client for meetings for macos (standard and for it admin) +1 moreUpdate package downgrade in Zoom Client for Meetings for MacOS7.5 High
- mi miuiSome Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by...8.8 High
- huawei emui, harmonyos, magic ui +2 moreThe DFX module has a vulnerability of improper validation of integrity check values.Successful...7.5 High
- linux kernel, fedoraproject fedora +1 moreA vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the...5.5 Medium
tensorflowPyPI,tensorflow-cpuPyPI,tensorflow-gpuPyPI +2 moreImproper Validation of Integrity Check Value in TensorFlow7.0 High- digitalbazaar forgeForge: AES-GCM authentication bypass via unvalidated tagLength option5.9 Medium
- digitalbazaar forgeForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count7.5 High
- listaryAn issue was discovered in Listary through 6. Improper implementation of the update process leads...7.5 High
- google tensorflowIncomplete validation of shapes in multiple TF ops7.0 High
- abb system access point, system access point 127v firmware, system access point 2.0 firmware +3 more +5 morefree@home System Access Point FW integrity check can be bypassed.6.1 Medium
- debian linux, linux kernel, netapp e-series santricity os controller +15 more +17 moreA flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP...6.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in Security Update 2021-004...5.5 Medium
- huawei emui, magic ui +1 moreThere is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone...7.5 High
- haxx curl, fedoraproject fedora, netapp cloud backup +16 more +18 moreWhen curl is instructed to download content using the metalink feature, thecontents is verified...6.5 Medium
- ibm security verify privilege managerIBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2 ) could allow a local...7.4 High
- google android, samsung mobile devices +1 moreImproper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers...7.1 High
- alfa awus036h firmware, cisco ip conference phone 8832 firmware, ip phone 6861 firmware +115 more +117 moreAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during...7.5 High
- proofpoint enterprise protectionProofpoint Enterprise Protection (PPS/PoD) before 8.17.0 contains a vulnerability that could...6.3 Medium
- nec aterm wf1200cr firmware, aterm wg1200cr firmware, aterm wg2600hs firmware +1 more +3 moreImproper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3...7.2 High
- huawei ais-bw80h-00 firmwareThere is an insufficient integrity check vulnerability in Huawei Sound X Product. The system does...6.8 Medium
- moodleMoodle Grade information disclosure in grade's external fetch functions4.3 Medium
- dlink dsr-1000 firmware, dsr-1000ac firmware, dsr-1000n firmware +7 more +9 moreAn issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration...8.8 High
- nec corporation aterm sa3500g, necplatforms aterm sa3500g firmware +1 moreImproper validation of integrity check value vulnerability in Aterm SA3500G firmware versions...6.8 Medium
- druva insyncinSync Client installer for macOS versions v6.8.0 and prior could allow an attacker to gain...7.8 High
- vw polo firmwareThe update functionality of the Discover Media infotainment system in Volkswagen Polo 2019...6.8 Medium
- lightning network daemon project network daemonPrior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. While claiming on-chain a received HTLC output, it didn't verify that the corresponding outgoing off-c…8.2 High
- Show moreLoading…