CWE-417: Communication Channel Errors
Weaknesses in this category are related to improper handling of communication channels and access paths. These weaknesses include problems in creating, managing, or removing alternate channels and alternate paths. Some of these can overlap virtual file problems and are commonly used in "bypass" attacks, such as those that exploit authentication errors.
From the CWE List. © The MITRE Corporation.
Newest
- document foundation libreoffice, opensuse leap +1 more Windows 8.3 path equivalence handling flaw allows LibreLogo script execution 9.8 Critical
- cryptopp crypto\+\+ Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This... 5.9 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm ipq4019 firmware, ipq8074 firmware +50 more +52 more The HMAC authenticating the message from QSEE is vulnerable to timing side channel analysis... 9.1 Critical
- epson wf-2750 firmware On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote... 7.5 High
- linuxcontainers lxc, canonical ubuntu linux, opensuse leap +3 more +5 more The lxc-user-nic component of LXC allows unprivileged users to open arbitrary files 3.3 Low
- sophos ssl vpn client Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon... 7.3 High
- arista eos Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart... 7.5 High
- mcafee network security management (nsm), network security manager +1 more SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerability 8.2 High
- mozilla firefox, firefox esr +1 more The Mozilla Windows updater modifies some files to be updated by reading the original file and... 7.8 High
- tor project tor, debian linux +1 more In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before... 3.7 Low
- huawei technologies co., ltd. s3300, huawei s3300 firmware +1 more S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack... 5.3 Medium
- octobercms october October CMS build 412 is vulnerable to file path modification in asset move functionality... 9.8 Critical
- red hat, inc. rkhunter, rootkit hunter project hunter +1 more rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing... 9.8 Critical
- bose soundtouch 30 The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4... 9.1 Critical
- ibm websphere application server, vmware spring security +1 more Security Constraint Bypass in Spring Security 7.5 High