Advisories · Weakness
CWE-923.
Every Advisory and CVE whose sources give the weakness CWE-923, newest first.
- CVSS 7.7 High
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost.
- Hitachi Energy TRO600 Series Firmware
- CWE-923
- CVSS 5.0 Medium
Wheels CLI: Wheels CLI through 4.1.0 does not verify that the local development server answering its…
- Wheels CLI
- CWE-923
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.0 High
Windows Security Center Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-923
- CVSS 8.2 High
Azure Key Vault Client SDK Elevation of Privilege Vulnerability
- Microsoft azure-keyvault-administration
- Microsoft azure-keyvault-certificates
- CWE-923
- CVSS 9.0 CriticalCritical · CVSS 9+
389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result
- Red Hat Directory Server 11
- Red Hat Directory Server 12
- CWE-923
- CVSS 8.8 High
Meta Platforms, Inc Meta Horizon OS: Prior to v66.0.0.733.524 of Meta Horizon OS…
- Meta Platforms, Inc Meta Horizon OS
- CWE-923
- CVSS 9.1 CriticalCritical · CVSS 9+
Meta Platforms, Inc Meta Horizon OS: Prior to v74.0.0.878.1682 of Meta Horizon OS…
- Meta Platforms, Inc Meta Horizon OS
- CWE-923
- CVSS 6.0 Medium
FTP Passive Data Connection Not Bound to the Authenticated Control Peer
- Eclipse Foundation Eclipse ThreadX NetX Duo
- CWE-923
- CVSS 9.3 CriticalCritical · CVSS 9+
WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access
- WatchGuard AP
- Broken access control
- CWE-923
- CVSS 5.3 Medium
Missing Firewall Configuration in mH-DEVELOPER
- F&F Filipowski mH-DEVELOPER
- CWE-923
- CVSS 8.2 High
Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications
- tw93 Pake
- Broken access control
- CWE-923
- CVSS 5.7 Medium
Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target
- warp-tech warpgate
- Weak cryptography or TLS
- CWE-923
- CVSS 8.6 High
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
- Microsoft 365 Copilot's Business Chat
- Command injection
- CWE-923
- CVSS 6.3 Medium
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
- Weak cryptography or TLS
- CWE-923
<0.21.0 · fixed in 0.21.0
GHSA-w34q-cm8f-9c5x · CVE-2026-81871 - CVSS 6.3 Medium
OpenStack Ironic: OpenStack Ironic through 38.0.0 may send a username and password to an unexpected remote…
- OpenStack Ironic
- CWE-923
- CVSS 7.5 High
An issue was discovered in the utcp package before 0.0.6 for OCaml.
- OCaml utcp
- CWE-923
- CVSS 7.4 High
OpenLDAP SASL authentication bypass
- curl
- CWE-923
- CVSS 5.8 Medium
SurrealDB allows bypass of deny-net flags via DNS resolution
- Broken access control
- CWE-923
>=2.1.0, <2.1.8 || >=2.2.0, <2.2.6 || >=2.3.0, <2.3.6 || >=3.0.0-alpha.1, <3.0.0-alpha.7 · fixed in 2.1.8, 2.2.6, 2.3.6, 3.0.0-alpha.7
GHSA-m3c3-78fh-w3w7 · CVE-2025-71390 - CVSS 8.7 High
Azure SQL Managed Instance Elevation of Privilege Vulnerability
- Microsoft Azure SQL Managed Instance
- CWE-923
- CVSS 7.1 High
Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
- AWS amazon-mq-mcp-server
- CWE-923
- CVSS 7.3 High
Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
- Apache Software Foundation Apache Kyuubi
- CWE-923
- CVSS 6.9 Medium
Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations.
- Ricoh Company Ricoh printers and Multifunction Printers (MFPs)
- CWE-923
- CVSS 8.5 High
External control of a file path in ASUS Aura Wallpaper Service
- ASUS Aura Wallpaper Service
- Path traversal
- CWE-923
- CVSS 6.9 Medium
Fortinet FortiSIEMWindowsAgent: A improper restriction of communication channel to intended endpoints vulnerability in…
- Fortinet FortiSIEMWindowsAgent
- CWE-923
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 5.0 Medium
Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- CWE-923
- CVSS 5.1 Medium
Docker Sandboxes ICMP egress restriction bypass after daemon restart
- Docker Sandboxes
- CWE-665
- CWE-923
- CVSS 5.7 Medium
Docker Sandboxes network egress allowlist bypass via unfiltered DNS resolution
- Docker Sandboxes
- CWE-923
- CVSS 5.4 Medium
Multiple Vulnerabilities in watsonx.data
- IBM watsonx.data
- CWE-923
- CVSS 5.0 Medium
Route Services Firewall Bypass
- CloudFoundry Foundation Routing release
- CloudFoundry Foundation CF Deployment
- CWE-923
- CVSS 5.3 Medium
Inadequate Pod Communication Restrictions, affects watsonx.data
- IBM watsonx.data
- CWE-923
- CVSS 9.7 CriticalCritical · CVSS 9+
Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode
- home-assistant Home Assistant Operating System
- home-assistant Home Assistant Supervisor
- CWE-923
- CVSS 5.1 Medium
Multiple Vulnerabilities in IBM Concert Software
- IBM Concert
- CWE-923
- CVSS 7.6 High
Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API
- cryptomator android
- CWE-346
- CWE-354
- CVSS 7.6 High
Cryptomator for IOS: Tampered vault configuration allows MITM attack on Hub API
- cryptomator ios
- CWE-346
- CWE-354
- CVSS 7.6 High
Cryptomator: Tampered vault configuration allows MITM attack on Hub API
- cryptomator
- CWE-346
- CWE-354
- CVSS 0.9 Low
QuRouter
- QNAP Systems Inc. QuRouter
- CWE-923
- CVSS 7.5 High
Azure IoT Explorer Information Disclosure Vulnerability
- Microsoft Azure IoT Explorer
- CWE-923
- CVSS 2.4 Low
Siemens Heliox Flex 180 kW EV Charging Station: A vulnerability has been identified in Heliox Flex 180 kW EV Charging Station (All…
- Siemens Heliox Flex 180 kW EV Charging Station
- Siemens Heliox Mobile DC 40 kW EV Charging Station
- CWE-923
- CVSS 5.9 Medium
VMware Workstation/Fusion NAT vulnerability
- VMware Workstation
- VMware Fusion
- CWE-923
- CVSS 8.5 High
Insufficient Configuration Protections Enable Database Credential Interception in Milner ImageDirector Capture
- Milner ImageDirector Capture
- Hard-coded credentials
- CWE-923
- CVSS 8.7 High
Columbia Weather Systems MicroServer Improper Restriction of Communication Channel to Intended Endpoints
- Columbia Weather Systems MicroServer
- CWE-923
- CVSS 6.2 Medium
NVIDIA RunAI: NVIDIA RunAI for all platforms contains a vulnerability where a user could cause an…
- NVIDIA RunAI
- CWE-923
- CVSS 5.3 Medium
International Standards Organization ISO 15118-2 Improper Restriction of Communication Channel to Intended Endpoints
- ISO 15118-2 Network and Application Protocol Requirements EV Car Chargers
- CWE-923
- CVSS 7.0 High
PowerShell Direct Elevation of Privilege Vulnerability
- Microsoft PowerShell 7.4
- Microsoft PowerShell 7.5
- CWE-923
- CVSS 6.7 Medium
Windows Hyper-V Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-923
- CVSS 6.9 Medium
Fujitsu Client Computing Limited UpdateNavi: Improper restriction of communication channel to intended endpoints issue exists in…
- Fujitsu Client Computing Limited UpdateNavi
- Fujitsu Client Computing Limited UpdateNaviInstallService
- CWE-923
- CVSS 3.0 Low
Fortinet FortiOS: An improper restriction of communication channel to intended endpoints vulnerability…
- Fortinet FortiOS
- CWE-923
- CVSS 8.8 High
Cisco Integrated Management Controller Privilege Escalation Vulnerability
- Cisco Unified Computing System (Managed)
- Cisco Unified Computing System (Standalone)
- CWE-923
- CVSS 6.8 Medium
Dataease Redshift Data Source JDBC Connection Parameters Not Verified Leads to RCE Vulnerability
- dataease
- Broken access control
- CWE-923
- CVSS 6.8 Medium
Dataease redshift JDBC Connection Remote Code Execution
- dataease
- Broken access control
- CWE-923
- CVSS 4.0 Medium
An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.
- CWE-923
- CVSS 7.6 High
Ribbon Communications - CWE-923: Improper Restriction of Communication Channel to Intended Endpoints
- Ribbon Communications Apollo 9608
- CWE-923
- CVSS 6.9 Medium
SIOS Technology, Inc. Quick Agent V3: Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of…
- SIOS Technology, Inc. Quick Agent V3
- SIOS Technology, Inc. Quick Agent V2
- CWE-923
- CVSS 7.1 High
Fortinet FortiProxy: A improper restriction of communication channel to intended endpoints vulnerability…
- Fortinet FortiProxy
- Fortinet FortiManager
- CWE-923
- CVSS 8.3 High
Dell Common Event Enabler: Dell Common Event Enabler, version(s) CEE 9.0.0.0…
- Dell Common Event Enabler
- CWE-923
- CVSS 2.0 Low
Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potenti…
- Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software
- CWE-923
- CVSS 6.8 Medium
IBM App Connect Enterprise Certified Container improper communications restriction
- IBM App Connect Enterprise Certified Container
- CWE-923