CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- cisco unified computing system (managed), unified computing system (standalone) +1 moreCisco Integrated Management Controller Privilege Escalation Vulnerability8.8 High
- dataeaseDataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability6.8 Medium
- dataeaseDataease redshift JDBC Connection Remote Code Execution6.8 Medium
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets...4.0 Medium
- ribbon communications apollo 9608Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints7.6 High
- sios technology, inc. quick agent v2, quick agent v3 +1 moreQuick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication...6.9 Medium
- fortinet fortianalyzer, fortimanager, fortios +3 more +5 moreA improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...7.1 High
- dell common event enablerDell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of...8.3 High
- No product listedImproper restriction of communication channel to intended endpoints in some Intel(R) PROSet...2.0 Low
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container improper communications restriction6.8 Medium
- ibm fusion, fusion hci, fusion hci for watsonx +3 more +5 moreIBM Fusion improper communication restriction4.0 Medium
- juniper junos os evolved, junos evolved +1 moreJunos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted7.7 High
- microsoft windows 11 version 24h2, windows 11 24h2 +1 moreSudo for Windows Spoofing Vulnerability5.6 Medium
- emlog pro, gotenna pro app +1 moreImproper Restriction of Communication Channel to Intended Endpoints in goTenna Pro7.6 High
- pimax play, pitool +1 moreMultiple Pimax products accept WebSocket connections from unintended endpoints. If this...9.8 Critical
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network6.9 Medium
- docker desktopIn Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC…7.3 High
- openvpn, openvpn 2 +1 moreThe interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be...7.5 High
- ricoh company, ltd streamline nx pc clientImproper restriction of communication channel to intended endpoints issue exists in Ricoh...6.3 Medium
- mullvad vpnMullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a...7.5 High
- element, element-hq element-android +1 moreElement Android Intent Redirection8.4 High
- dell smartfabric os10Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ...9.1 Critical
- juniper junos os evolvedJunos OS Evolved: Packets which are not destined to the router can reach the RE5.4 Medium
- nvidia jetson agx xavier series, jetson xavier nx, jetson agx xavier, jetson linux +2 moreNVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...7.1 High
- nvidia gpu display driver for windows and linux, gpu display driver, cloud gaming +1 more +3 moreNVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized...7.8 High
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 moreFTP Agent forwards traffic on inactive ports to LinkManager2.9 Low
- juniper paragon active assuranceParagon Active Assurance: Enabling the timescaledb enables IP forwarding7.2 High
- sap abap platform and sap web dispatcher, web dispatcher, abap platform kernel +2 moreIP filter vulnerability in ABAP Platform and SAP Web Dispatcher5.0 Medium
- corednscoreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints6.1 Medium
- corednscoreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints4.4 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreAn issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be...5.3 Medium
- google android, samsung mobile devices +1 moreImplicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows...3.3 Low
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Health Check Open Port Vulnerability6.5 Medium
- rti connext micro, connext professional, connext dds micro +3 more +5 morePotential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro8.8 High
- secomea gatemanager, gatemanager 8250 firmware +1 moreGateManager does not enforce strict hostname matching for WEB server3.7 Low
- sylabs singularityAction Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint6.3 Medium
- palo alto networks pan-osPAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access10.0 Critical
- medtronic 2090 carelink programmer, 2090 carelink programmer firmware, 29901 encore programmer +2 moreMedtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints7.1 High
- blackberry qnx software development platform, qnx software development platform (qnx sdp) +1 moreIn BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege...9.6 Critical
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism8.2 High
- openstack neutronOpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism9.1 Critical