CWE-940: Improper Verification of Source of a Communication Channel
The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- fortinet forticlientems, forticlientems cloud +1 moreAn improper verification of source of a communication channel vulnerability [CWE-940] in...3.5 Low
- ietf ipv6IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed...5.4 Medium
- ietf ipv6IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification...5.4 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript...8.1 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability5.3 Medium
- nt-ware uniflow online, uniflow online print \& scan, uniflow smartclient +2 moreuniFLOW Online device registration susceptible to compromise8.3 High
- horizoncloud catereaseAn issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly...9.8 Critical
- h3c rc3000 firmwareAn issue in H3C Technologies Co., Limited H3C Magic RC3000 RC3000V100R009 allows a remote...8.8 High
- tenda ax2 pro firmware, tendacn ax2 pro +1 moreAn issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote...9.8 Critical
- tenda ax12 firmwareAn issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service...6.5 Medium
- mi redmi ax6s firmwareRedmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same...5.2 Medium
- mi redmi ax6s firmwareRedmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in...4.1 Medium
- tp-link tl-7dr5130, tl-7dr5130 firmware +1 moreTP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same...6.3 Medium
- tp-link tl-7dr5130, tl-7dr5130 firmware +1 moreTP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in...6.3 Medium
github.com/edgelesssys/constellationGo,github.com/edgelesssys/constellation/v2Go +1 moreConstallation has pods exposed to peers in VPCNo score- sciener ttlock appCVE-2023-70046.5 Medium
- element, element-hq element-android +1 moreElement Android Intent Redirection8.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper IP Address Verification in GlobalProtect Gateway6.3 Medium
- siemens simatic cp 343-1, simatic cp 343-1 lean, siplus net cp 343-1 +5 more +7 moreA vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions),...7.5 High
- taiwan-ca(twca) jcicsecuritytoolTAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation8.8 High
- chunghwa telecom nokia g-040w-q, nokia g-040w-q firmware +1 moreChunghwa Telecom NOKIA G-040W-Q - Improper Input Validation9.8 Critical
- silicon labs ember znet, silabs emberznet +1 moreTouchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet10.0 Critical
- codesys development systemCODESYS: Missing integrity check in CODESYS Development System8.8 High
- usememos memos, usememos/memos +1 moreImproper Verification of Source of a Communication Channel in usememos/memos8.6 High
- usememos memos, usememos/memos +1 moreImproper Verification of Source of a Communication Channel in usememos/memos8.6 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering8.6 High
- eclipse theia, the eclipse foundation @theia/plugin-ext +1 moreImproper Verification of Communication Channel in @theia/plugin-ext6.1 Medium
- poezio, sleekxmpp project sleekxmpp, slixmpp project slixmpp +2 moreSleekXMPP and Slixmpp Incorrect Implementation of Message Carbons5.9 Medium
- apache tomcat, canonical ubuntu linux, debian linux +2 moreImproper Verification of Source of a Communication Channel in Apache Tomcat6.3 Medium