# CWE-300.

Every Advisory and CVE whose sources give the weakness CWE-300, newest first.

## Records, newest first

- [FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server](https://agentprime.io/advisories/CVE-2026-116789.md)
  `CVE-2026-116789` · CVE record: signalwire freeswitch · CVSS 7.4 High · Not analysed yet · Published 5 Nov 2026 · Tags: Weak cryptography or TLS, CWE-300
- [Zhonglun CloudPOS Automatic Update Program.cs channel accessible](https://agentprime.io/advisories/CVE-2026-97866.md)
  `CVE-2026-97866` · CVE record: Zhonglun CloudPOS · CVSS 6.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: CWE-300
- [Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)](https://agentprime.io/advisories/CVE-2026-76715.md)
  `CVE-2026-76715` · CVE record: Hewlett Packard Enterprise (HPE) ALE · CVSS 7.1 High · Not analysed yet · Published 22 Sept 2026 · Tags: CWE-300
- [Improper certificate validation in Eclipse Foundation Eclipse Ditto](https://agentprime.io/advisories/CVE-2026-84197.md)
  `CVE-2026-84197` · CVE record: Eclipse Foundation Eclipse Ditto · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS, CWE-300
- [Zbtlink MQWrt yunmgrd Cloud C2 Implant](https://agentprime.io/advisories/CVE-2026-74232.md)
  `CVE-2026-74232` · CVE record: Zbtlink L3_V2_8 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: CWE-300, CWE-506
- [CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.](https://agentprime.io/advisories/CVE-2025-29419.md)
  `CVE-2025-29419` · CVE record · CVSS 7.1 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-300
- [Multiple vulnerabilities in Ghost Robotics' Vision 60](https://agentprime.io/advisories/CVE-2026-12991.md)
  `CVE-2026-12991` · CVE record: Ghost Robotics Vision 60 · CVSS 8.7 High · Not analysed yet · Published 27 Jul 2026 · Tags: CWE-300
- [Security Boundary Bypass via Routing Node Impersonation](https://agentprime.io/advisories/CVE-2026-23812.md)
  `CVE-2026-23812` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10) · CVSS 4.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-300
- [Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation](https://agentprime.io/advisories/CVE-2026-23811.md)
  `CVE-2026-23811` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10) · CVSS 4.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-300
- [Cross-BSSID GTK Re-encryption and Traffic Injection](https://agentprime.io/advisories/CVE-2026-23810.md)
  `CVE-2026-23810` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10) · CVSS 4.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: CWE-300
- [A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute…](https://agentprime.io/advisories/CVE-2025-63363.md)
  `CVE-2025-63363` · CVE record · CVSS 7.5 High · Not analysed yet · Published 4 Dec 2025 · Tags: Broken access control, CWE-300
- [A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).](https://agentprime.io/advisories/CVE-2025-40770.md)
  `CVE-2025-40770` · CVE record: Siemens SINEC Traffic Analyzer · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-300
- [LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception](https://agentprime.io/advisories/CVE-2025-54792.md)
  `CVE-2025-54792` · CVE record: localsend localsend · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-300, CWE-345
- [Fortinet FortiOS: A channel accessible by non-endpoint vulnerability \[CWE-300\] in Fortinet FortiOS version…](https://agentprime.io/advisories/CVE-2024-50568.md)
  `CVE-2024-50568` · CVE record: Fortinet FortiOS and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-300
- [This issue was addressed through improved state management.](https://agentprime.io/advisories/CVE-2025-31214.md)
  `CVE-2025-31214` · CVE record: Apple iOS and iPadOS · CVSS 8.1 High · Not analysed yet · Published 12 May 2025 · Tags: CWE-300
- [Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-20122.md)
  `CVE-2025-20122` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 7.8 High · Not analysed yet · Published 7 May 2025 · Tags: CWE-300
- [Fortinet FortiOS: A improper restriction of communication channel to intended endpoints vulnerability…](https://agentprime.io/advisories/CVE-2024-50565.md)
  `CVE-2024-50565` · CVE record: Fortinet FortiOS and 3 more · CVSS 3.0 Low · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-300
- [IBM Cloud Pak System information disclosure](https://agentprime.io/advisories/CVE-2023-38272.md)
  `CVE-2023-38272` · CVE record: IBM Cloud Pak System · CVSS 5.9 Medium · Not analysed yet · Published 27 Mar 2025 · Tags: CWE-300
- [Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.](https://agentprime.io/advisories/CVE-2024-12602.md)
  `CVE-2024-12602` · CVE record: Huawei HarmonyOS · CVSS 6.2 Medium · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-300
- [Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.](https://agentprime.io/advisories/CVE-2024-36553.md)
  `CVE-2024-36553` · CVE record · CVSS 8.1 High · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-300
- [IBM Sterling B2B Integrator information disclosure](https://agentprime.io/advisories/CVE-2024-27263.md)
  `CVE-2024-27263` · CVE record: IBM Sterling B2B Integrator · CVSS 5.3 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: CWE-300
- [Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client](https://agentprime.io/advisories/CVE-2024-45407.md)
  `CVE-2024-45407` · CVE record: LizardByte Sunshine · CVSS 6.5 Medium · Not analysed yet · Published 10 Sept 2024 · Tags: CWE-300
- [ntlk unsafe deserialization vulnerability](https://agentprime.io/advisories/GHSA-cgvx-9447-vcch.md)
  `GHSA-cgvx-9447-vcch`, `CVE-2024-39705`, `PYSEC-2024-167` · PyPI `nltk`: affected `<3.9`, fixed in `3.9` · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2024 · Tags: Insecure deserialization, CWE-300
- [BIG-IP Next Central Manager vulnerability](https://agentprime.io/advisories/CVE-2024-32049.md)
  `CVE-2024-32049` · CVE record: F5 BIG-IP Next Central Manager · CVSS 7.4 High · Not analysed yet · Published 8 May 2024 · Tags: CWE-300
- [easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.](https://agentprime.io/advisories/CVE-2019-19751.md)
  `CVE-2019-19751` · CVE record · CVSS 5.6 Medium · Not analysed yet · Published 30 Apr 2024 · Tags: CWE-300
- [dectalk-tts Uses Unencrypted HTTP Request](https://agentprime.io/advisories/GHSA-6cf6-8hvr-r68w.md)
  `GHSA-6cf6-8hvr-r68w`, `CVE-2024-31206` · npm `dectalk-tts`: affected `>=1.0.0, <1.0.1`, fixed in `1.0.1` · CVSS 8.2 High · Not analysed yet · Published 4 Apr 2024 · Tags: Weak cryptography or TLS, CWE-300, CWE-598
- [IBM Security Access Manager Container gain access](https://agentprime.io/advisories/CVE-2023-31004.md)
  `CVE-2023-31004` · CVE record: IBM Security Verify Access Appliance and 1 more · CVSS 8.3 High · Not analysed yet · Published 3 Feb 2024 · Tags: CWE-300
- [Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes](https://agentprime.io/advisories/CVE-2023-7008.md)
  `CVE-2023-7008` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 23 Dec 2023 · Tags: CWE-300
- [SoftEther VPN: An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of…](https://agentprime.io/advisories/CVE-2023-32634.md)
  `CVE-2023-32634` · CVE record: SoftEther VPN SoftEther VPN · CVSS 7.8 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-300
- [Multiple vulnerabilities in Open5GS](https://agentprime.io/advisories/CVE-2023-4885.md)
  `CVE-2023-4885` · CVE record: Open5GS Open5GS · CVSS 6.5 Medium · Not analysed yet · Published 3 Oct 2023 · Tags: CWE-300
- [Channel Accessible by Non-Endpoint](https://agentprime.io/advisories/CVE-2023-2310.md)
  `CVE-2023-2310` · CVE record: Schweitzer Engineering Laboratories SEL-3505 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-300
- [containernetworking/plugins vulnerable to MitM attacks](https://agentprime.io/advisories/GHSA-fx6x-h9g4-56f8.md)
  `GHSA-fx6x-h9g4-56f8`, `CVE-2020-10749`, `GO-2023-1915` · Go `github.com/containernetworking/plugins`: affected `<0.8.6`, fixed in `0.8.6` · CVSS 6.0 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-300
- [Missing SSH host key validation in Jenkins Amazon EC2 Plugin](https://agentprime.io/advisories/GHSA-q8qq-2p5p-rg44.md)
  `GHSA-q8qq-2p5p-rg44`, `CVE-2020-2185` · Maven `org.jenkins-ci.plugins:ec2`: affected `<1.50.2`, fixed in `1.50.2` · CVSS 5.6 Medium · Not analysed yet · Published 24 May 2022 · Tags: CWE-300
- [Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin](https://agentprime.io/advisories/GHSA-345p-pw5q-g98v.md)
  `GHSA-345p-pw5q-g98v`, `CVE-2019-16546` · Maven `org.jenkins-ci.plugins:google-compute-engine`: affected `<4.2.0`, fixed in `4.2.0` · CVSS 6.8 Medium · Not analysed yet · Published 24 May 2022 · Tags: Broken access control, CWE-300
- [An SSL certificate host verification vulnerability affects HCL Verse for Android](https://agentprime.io/advisories/CVE-2021-27768.md)
  `CVE-2021-27768` · CVE record: HCL Software Verse for Android · CVSS 6.3 Medium · Not analysed yet · Published 12 May 2022 · Tags: CWE-300
- [Apache Tomcat affected by vulnerability in TLS and SSL protocol](https://agentprime.io/advisories/GHSA-f7w7-6pjc-wwm6.md)
  `GHSA-f7w7-6pjc-wwm6`, `CVE-2009-3555` · Maven `org.apache.tomcat:tomcat`: affected `>=7.0.0, <7.0.10 || >=6.0.0, <6.0.32 || >=5.0.0, <5.5.33`, fixed in `7.0.10`, `6.0.32`, `5.5.33` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.87 · Not analysed yet · Published 2 May 2022 · Tags: Weak cryptography or TLS, CWE-300
- [Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL](https://agentprime.io/advisories/CVE-2022-22156.md)
  `CVE-2022-22156` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Weak cryptography or TLS, CWE-300, CWE-358
- [Anker: An authentication bypass vulnerability exists in the process_msg() function of the…](https://agentprime.io/advisories/CVE-2021-21953.md)
  `CVE-2021-21953` · CVE record: Anker · CVSS 7.7 High · Not analysed yet · Published 22 Dec 2021 · Tags: CWE-300
- [Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.](https://agentprime.io/advisories/CVE-2021-31386.md)
  `CVE-2021-31386` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Weak cryptography or TLS, CWE-300, CWE-325, CWE-693
- [The Eclipse Foundation Eclipse Equinox: In all released versions of Eclipse Equinox…](https://agentprime.io/advisories/CVE-2021-41033.md)
  `CVE-2021-41033` · CVE record: The Eclipse Foundation Eclipse Equinox · No CVSS score · Not analysed yet · Published 13 Sept 2021 · Tags: CWE-300
- [When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an…](https://agentprime.io/advisories/CVE-2021-32926.md)
  `CVE-2021-32926` · CVE record: Micro800, MicroLogix 1400 · CVSS 5.9 Medium · Not analysed yet · Published 3 Jun 2021 · Tags: CWE-300
- [EdgeMAX EdgeRouter: A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious…](https://agentprime.io/advisories/CVE-2021-22909.md)
  `CVE-2021-22909` · CVE record: EdgeMAX EdgeRouter · No CVSS score · Not analysed yet · Published 27 May 2021 · Tags: CWE-300
- [curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.](https://agentprime.io/advisories/CVE-2021-22890.md)
  `CVE-2021-22890` · CVE record: https\://github.com/curl/curl · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2021 · Tags: CWE-300
- [Insecure Defaults Leads to Potential MITM in ezseed-transmission](https://agentprime.io/advisories/GHSA-p788-rj37-357w.md)
  `GHSA-p788-rj37-357w`, `CVE-2016-1000224` · npm `ezseed-transmission`: affected `>=0.0.10, <0.0.15`, fixed in `0.0.15` · CVSS 4.2 Medium · Not analysed yet · Published 1 Sept 2020 · Tags: Weak cryptography or TLS, CWE-300
- [Man-in-the-middle attack in Moonlight iOS/tvOS](https://agentprime.io/advisories/CVE-2020-11024.md)
  `CVE-2020-11024` · CVE record: moonlight-stream Moonlight · CVSS 6.1 Medium · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-300
- [Machine-In-The-Middle in https-proxy-agent](https://agentprime.io/advisories/GHSA-pc5p-h8pf-mvwp.md)
  `GHSA-pc5p-h8pf-mvwp` · npm `https-proxy-agent`: affected `<2.2.3`, fixed in `2.2.3` · CVSS 6.1 Medium · Not analysed yet · Published 16 Apr 2020 · Tags: CWE-300
- [MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks.](https://agentprime.io/advisories/CVE-2019-3981.md)
  `CVE-2019-3981` · CVE record: MikroTik WinBox · No CVSS score · Not analysed yet · Published 14 Jan 2020 · Tags: CWE-300
- [Red Hat VPN: A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS…](https://agentprime.io/advisories/CVE-2019-14899.md)
  `CVE-2019-14899` · CVE record: Red Hat VPN · CVSS 7.4 High · Not analysed yet · Published 11 Dec 2019 · Tags: CWE-300
- [Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.](https://agentprime.io/advisories/CVE-2019-0054.md)
  `CVE-2019-0054` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Oct 2019 · Tags: Weak cryptography or TLS, CWE-300
- [UniFi: SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi…](https://agentprime.io/advisories/CVE-2019-5456.md)
  `CVE-2019-5456` · CVE record: UniFi UniFi · No CVSS score · Not analysed yet · Published 30 Jul 2019 · Tags: CWE-300
- [Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs.](https://agentprime.io/advisories/CVE-2019-8282.md)
  `CVE-2019-8282` · CVE record: Sentinel LDK RTE · No CVSS score · Not analysed yet · Published 7 Jun 2019 · Tags: CWE-300
- [Invitations Service supports HTTP connections](https://agentprime.io/advisories/CVE-2019-3793.md)
  `CVE-2019-3793` · CVE record: Pivotal Apps Manager · CVSS 8.1 High · Not analysed yet · Published 24 Apr 2019 · Tags: CWE-300
- [Synology Android Moments: Channel accessible by non-endpoint vulnerability in privacy page in Synology Android…](https://agentprime.io/advisories/CVE-2018-13298.md)
  `CVE-2018-13298` · CVE record: Synology Android Moments · CVSS 4.2 Medium · Not analysed yet · Published 1 Apr 2019 · Tags: CWE-300
- [Insecure Defaults Allow MITM Over TLS in engine.io-client](https://agentprime.io/advisories/GHSA-4r4m-hjwj-43p8.md)
  `GHSA-4r4m-hjwj-43p8`, `CVE-2016-10536` · npm `engine.io-client`: affected `<1.6.9`, fixed in `1.6.9` · CVSS 5.9 Medium · Not analysed yet · Published 18 Feb 2019 · Tags: CWE-300
- [Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administrative...](https://agentprime.io/advisories/GHSA-8q95-jj7p-x93x.md)
  `GHSA-8q95-jj7p-x93x`, `CVE-2018-14636`, `PYSEC-2018-94` · PyPI `neutron`: affected `>=7.0.0, <11.0.5 || >=12.0.0, <12.0.3`, fixed in `11.0.5`, `12.0.3` · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2018 · Tags: CWE-300
- [samba: A flaw was found in the way samba client before samba 4.4.16…](https://agentprime.io/advisories/CVE-2017-12151.md)
  `CVE-2017-12151` · CVE record: Samba samba · CVSS 7.4 High · Not analysed yet · Published 27 Jul 2018 · Tags: CWE-300
- [samba: It was found that samba before 4.4.16, 4.5.x before 4.5.14…](https://agentprime.io/advisories/CVE-2017-12150.md)
  `CVE-2017-12150` · CVE record: Samba samba · CVSS 7.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.13 · Not analysed yet · Published 26 Jul 2018 · Tags: CWE-300
- [Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication](https://agentprime.io/advisories/CVE-2018-0025.md)
  `CVE-2018-0025` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 11 Jul 2018 · Tags: Weak cryptography or TLS, CWE-300
- [A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.](https://agentprime.io/advisories/CVE-2017-12697.md)
  `CVE-2017-12697` · CVE record: General Motors and Shanghai OnStar (SOS) iOS Client · No CVSS score · Not analysed yet · Published 9 Jan 2018 · Tags: CWE-300
- [It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.](https://agentprime.io/advisories/CVE-2017-15086.md)
  `CVE-2017-15086` · CVE record: Red Hat, Inc. Gluster Storage for RHEL 6 · No CVSS score · Not analysed yet · Published 8 Nov 2017 · Tags: CWE-300

Older: <https://agentprime.io/advisories/tag/cwe-300.md?cursor=WyIyMDE3LTExLTA4VDE5OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxNy0xNTA4NiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-300>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-300/>. Everything for agents: <https://agentprime.io/llms.txt>.