CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- sooma tdcs home therapy Brain stimulation parameters can be modified via Bluetooth in Sooma 5.3 Medium
- basekick-labs arc Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer 8.3 High
- coturn Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests 2.3 Low
- postgresql PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL 4.2 Medium
- mitsubishi electric corporation ac servo melservo-j5 mr-j5-g, ac servo melservo-j5 mr-j5-g-hs, ac servo melservo-j5 mr-j5-g-ll +119 more +121 more Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol 7.1 High
- erlang otp, erlang\/otp, erlang\/ssl +2 more Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium
- deltaww dvp80es3 DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability 7.5 High
- dräger infinity acute care system, standalone infinity m540 patient monitor +1 more Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling 8.8 High
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh +1 more Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium
- gardyn home kit firmware An issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute... 9.4 Critical
- sick ag inspectorp8xx, lector8xx +1 more SICK Lector8xx and InspectorP8xx vulnerable for code execution 8.8 High
- schneider electric pro-face gp-pro ex, pro-face remote hmi +1 more CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel... 6.1 Medium
- schneider electric modicon m340 cpu (part numbers bmxp34*), modicon mc80 (part numbers bmkc80), modicon momentum unity m1e processor (171cbu*) +3 more +5 more CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel... 7.5 High
- microsoft windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation), windows server 2012 +13 more +15 more Windows DNS Spoofing Vulnerability 7.5 High
- mirotalk p2p Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before... 9.1 Critical
- gl-inet a1300 firmware, ap1300 firmware, ar300m16 firmware +25 more +27 more An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4... 5.3 Medium
- abb advabuild, advant mod 300 advabuild +1 more Insufficient access control on Inter process communication, 7.8 High
-
edumfaPyPI BlastRADIUS also affects eduMFA 5.3 Medium - ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 more RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. 9.0 Critical
- gotomain libosdp RMAC revert to the beginning of the session in libosdp 5.1 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +46 more +48 more CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication... 8.1 High
- schedmd slurm An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper... 7.5 High
- line corporation line@ for android, line@ for ios, line line\@ +2 more LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in... 5.9 Medium
- line, line corporation for android, for ios +2 more LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are... 5.9 Medium
- linecorp line An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of... 5.4 Medium
- bluetens bluetensq Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in... 3.1 Low
- samba, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 more Samba: smb2 packet signing is not enforced when "server signing = required" is set 5.9 Medium
- becton dickinson & co cqi reporter, bd guardrails cqi reporter +1 more CQI Data Sniffing 3.5 Low
- cbot core, panel, chatbot +2 more Channel Accessible by Non-Endpoint in CBOT's Chatbot 8.1 High
- f5 big-ip edge client, big-ip access policy manager +1 more BIG-IP Edge Client for Windows and Mac OS vulnerability 5.9 Medium
- rockwell automation micrologix 1100, micrologix 1400-a, micrologix 1400-b/c +2 more +4 more MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack 7.5 High
- microsoft nbdkit, redhat enterprise linux +1 more A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS... 3.1 Low
- kuka sim pro ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel 4.3 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +9 more +11 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability 8.6 High
- eclipse che, the eclipse foundation eclipse che +1 more The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an... 8.1 High
- minio MITM modification of request bodies in MinIO 6.5 Medium
- mattermost server An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An... 6.5 Medium
- f5 big-iq, big-iq centralized management +1 more In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow... 9.1 Critical
- renpho An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data... 6.8 Medium
- canonical ubuntu linux, debian linux, w1.fi wpa supplicant +2 more An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain... 6.5 Medium
- square-enix final fantasy xiv ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by... 8.1 High