Advisories · Weakness
CWE-923.
Every Advisory and CVE whose sources give the weakness CWE-923, newest first.
- CVSS 4.0 Medium
IBM Fusion improper communication restriction
- IBM Fusion
- IBM Fusion HCI
- CWE-923
- CVSS 7.7 High
Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 5.6 Medium
Sudo for Windows Spoofing Vulnerability
- Microsoft Windows 11 Version 24H2
- CWE-923
- CVSS 7.6 High
Improper Restriction of Communication Channel to Intended Endpoints in goTenna Pro
- goTenna Pro
- CWE-923
- CVSS 8.8 High
Multiple Pimax products accept WebSocket connections from unintended endpoints.
- Pimax Play
- Pimax PiTool
- CWE-923
- CVSS 6.9 Medium
Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.3 High
In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC…
- Docker Inc. Docker Desktop
- CWE-923
- CVSS 7.5 High
OpenVPN 2: The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to…
- OpenVPN 2
- CWE-923
- CVSS 6.3 Medium
RICOH COMPANY, LTD Ricoh Streamline NX PC Client: Improper restriction of communication channel to intended endpoints issue exists in Ricoh…
- RICOH COMPANY, LTD Ricoh Streamline NX PC Client
- CWE-923
- CVSS 7.5 High
Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DNS traffic can leave the device.
- CWE-923
- CVSS 8.4 High
Element Android Intent Redirection
- element-hq element-android
- CWE-923
- CWE-940
- CVSS 9.1 CriticalCritical · CVSS 9+
Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured.
- Dell SmartFabric OS10
- CWE-923
- CVSS 5.4 Medium
Junos OS Evolved: Packets which are not destined to the router can reach the RE
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.1 High
NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arb…
- NVIDIA Jetson AGX Xavier series, Jetson Xavier NX
- CWE-923
- CVSS 2.9 Low
FTP Agent forwards traffic on inactive ports to LinkManager
- Secomea SiteManager
- CWE-923
- CVSS 7.2 High
Paragon Active Assurance: Enabling the timescaledb enables IP forwarding
- Juniper Networks Paragon Active Assurance
- CWE-923
- CVSS 5.0 Medium
IP filter vulnerability in ABAP Platform and SAP Web Dispatcher
- ABAP Platform and SAP Web Dispatcher
- CWE-923
- CVSS 6.1 Medium
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
- Open redirect
- CWE-923
<=1.9.3 · no fixed version yet
GHSA-h828-v5pv-33qx · CVE-2022-2837 - CVSS 4.4 Medium
coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints
- CWE-923
<=1.9.3 · no fixed version yet
GHSA-ch7v-37xg-75ph · CVE-2022-2835 -
Linux kernel: An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can…
- Linux kernel
- CWE-923
- CVSS 3.3 Low
Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner.
- Samsung Mobile Devices
- CWE-923
- CVSS 8.2 High
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism
- CWE-923
<7.0.5 || >=8.0.0, <8.1.1 · fixed in 7.0.5, 8.1.1
GHSA-qpwc-p365-pqrr · CVE-2016-5362 - CVSS 8.8 High
Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
- RTI Connext Professional
- RTI Connext Micro
- CWE-406
- CWE-923
- CVSS 3.7 Low
GateManager does not enforce strict hostname matching for WEB server
- Secomea GateManager
- CWE-923
- CVSS 6.3 Medium
Action Commands (run/shell/exec) Against Library URIs Ignore Configured Remote Endpoint
- CWE-20
- CWE-923
>=3.7.2, <3.7.4 · fixed in 3.7.4
GHSA-5mv9-q7fq-9394 · CVE-2021-32635 - CVSS 10.0 CriticalCritical · CVSS 9+
PAN-OS on PA-7000 Series: Improper restriction of communication to Log Forwarding Card (LFC) allows root access
- Palo Alto Networks PAN-OS
- CWE-923
- CVSS 7.1 High
Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints
- Medtronic 2090 CareLink Programmer
- Medtronic 29901 Encore Programmer
- CWE-923
- CVSS 9.6 CriticalCritical · CVSS 9+
In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more Q…
- BlackBerry QNX Software Development Platform (QNX SDP)
- CWE-923