CWE-300.

FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server

• signalwire freeswitch
• Weak cryptography or TLS
• CWE-300

Zhonglun CloudPOS Automatic Update Program.cs channel accessible

• Zhonglun CloudPOS
• CWE-300

Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• CWE-300

Improper certificate validation in Eclipse Foundation Eclipse Ditto

• Eclipse Foundation Eclipse Ditto
• Weak cryptography or TLS
• CWE-300

Zbtlink MQWrt yunmgrd Cloud C2 Implant

• Zbtlink L3_V2_8
• Zbtlink WE826-T2
• CWE-300
• CWE-506

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

• CWE-300

Multiple vulnerabilities in Ghost Robotics' Vision 60

• Ghost Robotics Vision 60
• CWE-300

Security Boundary Bypass via Routing Node Impersonation

• Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
• CWE-300

Unauthorized Bi-Directional Traffic Interception via L2/L3 Manipulation

• Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
• CWE-300

Cross-BSSID GTK Re-encryption and Traffic Injection

• Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10)
• CWE-300

A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute…

• Broken access control
• CWE-300

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions).

• Siemens SINEC Traffic Analyzer
• CWE-300

LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

• localsend
• CWE-300
• CWE-345

Fortinet FortiOS: A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version…

• Fortinet FortiOS
• Fortinet FortiProxy
• CWE-300

This issue was addressed through improved state management.

• Apple iOS and iPadOS
• CWE-300

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

• Cisco Catalyst SD-WAN Manager
• CWE-300

Fortinet FortiOS: A improper restriction of communication channel to intended endpoints vulnerability…

• Fortinet FortiOS
• Fortinet FortiVoice
• CWE-300

IBM Cloud Pak System information disclosure

• IBM Cloud Pak System
• CWE-300

Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

• Huawei HarmonyOS
• CWE-300

Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.

• CWE-300

IBM Sterling B2B Integrator information disclosure

• IBM Sterling B2B Integrator
• CWE-300

Sunshine has incorrect state management during pairing process may lead to incorrectly authorized client

• LizardByte Sunshine
• CWE-300

ntlk unsafe deserialization vulnerability

• Insecure deserialization
• CWE-300

<3.9 · fixed in 3.9

BIG-IP Next Central Manager vulnerability

• F5 BIG-IP Next Central Manager
• CWE-300

easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

• CWE-300

dectalk-tts Uses Unencrypted HTTP Request

• Weak cryptography or TLS
• CWE-300

>=1.0.0, <1.0.1 · fixed in 1.0.1

IBM Security Access Manager Container gain access

• IBM Security Verify Access Appliance
• IBM Security Verify Access Docker
• CWE-300

Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-300

SoftEther VPN: An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of…

• SoftEther VPN
• CWE-300

Multiple vulnerabilities in Open5GS

• Open5GS
• CWE-300

Channel Accessible by Non-Endpoint

• Schweitzer Engineering Laboratories SEL-3505
• Schweitzer Engineering Laboratories, Inc. SEL-3505-3
• CWE-300

containernetworking/plugins vulnerable to MitM attacks

• CWE-300

<0.8.6 · fixed in 0.8.6

Missing SSH host key validation in Jenkins Amazon EC2 Plugin

• CWE-300

<1.50.2 · fixed in 1.50.2

Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin

• Broken access control
• CWE-300

<4.2.0 · fixed in 4.2.0

An SSL certificate host verification vulnerability affects HCL Verse for Android

• HCL Software Verse for Android
• CWE-300

Apache Tomcat affected by vulnerability in TLS and SSL protocol

• Weak cryptography or TLS
• CWE-300

>=7.0.0, <7.0.10 || >=6.0.0, <6.0.32 || >=5.0.0, <5.5.33 · fixed in 7.0.10, 6.0.32, 5.5.33

Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

Anker: An authentication bypass vulnerability exists in the process_msg() function of the…

• Anker
• CWE-300

Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

The Eclipse Foundation Eclipse Equinox: In all released versions of Eclipse Equinox…

• The Eclipse Foundation Eclipse Equinox
• CWE-300

When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and replace it with an…

• Micro800, MicroLogix 1400
• CWE-300

EdgeMAX EdgeRouter: A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious…

• EdgeMAX EdgeRouter
• CWE-300

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.

• https://github.com/curl/curl
• CWE-300

Insecure Defaults Leads to Potential MITM in ezseed-transmission

• Weak cryptography or TLS
• CWE-300

>=0.0.10, <0.0.15 · fixed in 0.0.15

Man-in-the-middle attack in Moonlight iOS/tvOS

• Moonlight
• CWE-300

Machine-In-The-Middle in https-proxy-agent

• CWE-300

<2.2.3 · fixed in 2.2.3

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks.

• MikroTik WinBox
• CWE-300

Red Hat VPN: A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS…

• Red Hat VPN
• CWE-300

Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

UniFi: SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi…

• UniFi
• CWE-300

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs.

• Sentinel LDK RTE
• CWE-300

Invitations Service supports HTTP connections

• Pivotal Apps Manager
• CWE-300

Synology Android Moments: Channel accessible by non-endpoint vulnerability in privacy page in Synology Android…

• Synology Android Moments
• CWE-300

Insecure Defaults Allow MITM Over TLS in engine.io-client

• CWE-300

<1.6.9 · fixed in 1.6.9

Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administrative...

• CWE-300

>=7.0.0, <11.0.5 || >=12.0.0, <12.0.3 · fixed in 11.0.5, 12.0.3

samba: A flaw was found in the way samba client before samba 4.4.16…

• samba
• CWE-300

samba: It was found that samba before 4.4.16, 4.5.x before 4.5.14…

• samba
• CWE-300

Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1.

• General Motors and Shanghai OnStar (SOS) iOS Client
• CWE-300

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

• Red Hat, Inc. Gluster Storage for RHEL 6
• CWE-300