CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi energy tro600 series firmware TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access... 7.7 High
- wheels cli Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP... 5.0 Medium
- juniper networks junos os evolved Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker 6.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +19 more +21 more Windows Security Center Elevation of Privilege Vulnerability 7.0 High
- microsoft azure-keyvault-administration, azure-keyvault-certificates, azure-keyvault-keys +1 more +3 more Azure Key Vault Client SDK Elevation of Privilege Vulnerability 8.2 High
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more 389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result 9.0 Critical
- meta platforms, inc horizon os Prior to v66.0.0.733.524 of Meta Horizon OS, OVRMediaService could be induced to send a... 8.8 High
- meta platforms, inc horizon os Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a... 9.1 Critical
- eclipse foundation threadx netx duo FTP Passive Data Connection Not Bound to the Authenticated Control Peer 6.0 Medium
- watchguard ap WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access 9.3 Critical
- f&f filipowski mh-developer Missing Firewall Configuration in mH-DEVELOPER 5.3 Medium
- tw93 pake Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications 8.2 High
- warp-tech warpgate Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target 5.7 Medium
- microsoft 365 copilot's business chat, 365 copilot chat +1 more Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability 8.6 High
- open-telemetry opentelemetry-go OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning 6.3 Medium
- openstack ironic OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote host... 6.3 Medium
- curl OpenLDAP SASL authentication bypass 7.4 High
- microsoft azure sql managed instance Azure SQL Managed Instance Elevation of Privilege Vulnerability 8.7 High
- aws amazon-mq-mcp-server Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection 7.1 High
- apache kyuubi Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy 7.3 High
- ocaml utcp An issue was discovered in the utcp package before 0.0.6 for OCaml. Out-of-order segment... 7.5 High
- ricoh company printers and multifunction printers (mfps) Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement... 6.9 Medium
- surrealdb SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution 5.8 Medium
- asus aura wallpaper service Improper Restriction of Communication Channel to Intended Endpoints and External Control of File... 8.5 High
- fortinet fortisiem, fortisiemwindowsagent +1 more A improper restriction of communication channel to intended endpoints vulnerability in Fortinet... 6.9 Medium
- juniper junos os evolved Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker 6.9 Medium
- juniper junos os evolved Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker 6.9 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +17 more +19 more Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 5.0 Medium
- docker sandboxes Docker Sandboxes ICMP egress restriction bypass after daemon restart 5.1 Medium
- docker sandboxes Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution 5.7 Medium
- ibm watsonx.data Multiple Vulnerabilities in watsonx.data 5.4 Medium
- cloudfoundry routing release, cloudfoundry foundation cf deployment, cloudfoundry cf-deployment +2 more Route Services Firewall Bypass 5.0 Medium
- ibm watsonx.data Inadequate Pod Communication Restrictions, affects watsonx.data 5.3 Medium
- home-assistant home assistant supervisor, home assistant operating system +1 more Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode 9.7 Critical
- ibm concert Multiple Vulnerabilities in IBM Concert Software 5.1 Medium
- cryptomator android, cryptomator +1 more Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API 7.6 High
- cisco ios, cryptomator +1 more Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API 7.6 High
- cryptomator Cryptomator: Tampered vault configuration allows MITM attack on Hub API 7.6 High
- qnap qurouter QuRouter 0.9 Low
- microsoft azure iot explorer Azure IoT Explorer Information Disclosure Vulnerability 7.5 High
- siemens heliox flex 180 kw ev charging station, heliox mobile dc 40 kw ev charging station +1 more A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All versions < F4... 2.4 Low
- vmware fusion, workstation +1 more VMware Workstation/Fusion NAT vulnerability 5.9 Medium
- milner imagedirector capture Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture 8.5 High
- columbia weather systems microserver, columbiaweather weather microserver firmware +1 more Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints 8.7 High
- nvidia runai NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an improper... 6.2 Medium
- iso 15118-2 network and application protocol requirements ev car chargers International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints 5.3 Medium
- microsoft powershell, powershell 7.4, powershell 7.5 +24 more +26 more PowerShell Direct Elevation of Privilege Vulnerability 7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 more Windows Hyper-V Remote Code Execution Vulnerability 6.7 Medium
- fujitsu client computing limited updatenavi, updatenaviinstallservice +1 more Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1... 6.9 Medium
- fortinet fortios An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in... 3.0 Low
- Show olderLoading…