Advisories · Weakness
CWE-924.
Every Advisory and CVE whose sources give the weakness CWE-924, newest first.
- CVSS 5.3 Medium
Brain stimulation parameters can be modified via Bluetooth in Sooma
- Sooma tDCS Home Therapy
- CWE-924
- CVSS 8.3 High
Arc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peer
- Basekick-Labs arc
- Authentication bypass
- CWE-345
- CVSS 2.3 Low
Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests
- coturn
- CWE-345
- CWE-924
- CVSS 4.2 Medium
PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL
- PostgreSQL
- CWE-924
- CVSS 7.1 High
Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocol
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-16
- Mitsubishi Electric Corporation MELSEC MX Controller MX-R model MXR300-32
- CWE-924
- CVSS 6.3 Medium
Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl
- Erlang OTP
- CWE-924
- CVSS 7.5 High
DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability
- deltaww DVP80ES3
- CWE-924
- CVSS 8.8 High
Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling
- Dräger Infinity Acute Care System
- Dräger Standalone Infinity M540 patient monitor
- CWE-924
- CVSS 9.4 CriticalCritical · CVSS 9+
Information disclosure in Gardyn Home Kit Firmware
- Gardyn Home Kit Firmware
- Command injection
- Information disclosure
- CVSS 8.8 High
SICK Lector8xx and InspectorP8xx vulnerable for code execution
- SICK AG SICK Lector8xx
- SICK AG SICK InspectorP8xx
- CWE-924
- CVSS 6.1 Medium
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availabi…
- Schneider Electric Pro-face GP-Pro EX
- Schneider Electric Pro-face Remote HMI
- CWE-924
- CVSS 7.5 High
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service…
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon MC80 (part numbers BMKC80)
- CWE-924
- CVSS 7.5 High
Windows DNS Spoofing Vulnerability
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- CWE-924
- CVSS 9.1 CriticalCritical · CVSS 9+
Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.
- CWE-924
- CVSS 6.5 Medium
An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.12, AP1300/S1300 v4.3…
- CWE-924
- CVSS 7.8 High
Insufficient access control on Inter process communication,
- ABB Advant MOD 300 AdvaBuild
- CWE-924
- CVSS 6.8 Medium
BlastRADIUS also affects eduMFA
- CWE-924
<2.2.0 · fixed in 2.2.0
GHSA-vhmj-5q9r-mm9g - CVSS 5.1 Medium
LibOSDP RMAC revert to the beginning of the session
- CWE-924
<3.0.0 · fixed in 3.0.0
GHSA-xhjw-7vh5-qxqm · CVE-2024-52288 - CVSS 8.1 High
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of c…
- Schneider Electric Modicon M340 CPU (part numbers BMXP34*)
- Schneider Electric Modicon M580 CPU (part numbers BMEP* and BMEH*, excluding M580 CPU Safety)
- CWE-924
- CVSS 5.9 Medium
Samba: smb2 packet signing is not enforced when "server signing = required" is set
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Weak cryptography or TLS
- CWE-924
- CVSS 3.5 Low
CQI Data Sniffing
- Becton Dickinson & Co CQI Reporter
- Weak cryptography or TLS
- CWE-924
- CVSS 8.1 High
Channel Accessible by Non-Endpoint in CBOT's Chatbot
- CBOT Chatbot
- CWE-924
- CVSS 5.9 Medium
BIG-IP Edge Client for Windows and Mac OS vulnerability
- F5 BIG-IP Edge Client
- CWE-924
- CVSS 7.5 High
MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition Attack
- Rockwell Automation MicroLogix 1100
- Rockwell Automation MicroLogix 1400-B/C
- CWE-924
-
nbdkit: A flaw was found in nbdkit due to to improperly caching plaintext state across the…
- nbdkit
- CWE-924
- CVSS 4.3 Medium
ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel
- KUKA Sim Pro
- CWE-924
- CVSS 8.6 High
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-924
-
The Eclipse Foundation Eclipse Che: The build of some language stacks of Eclipse Che version 6 includes pulling some binaries…
- The Eclipse Foundation Eclipse Che
- CWE-924
- CVSS 6.5 Medium
MITM modification of request bodies in MinIO
- minio
- CWE-924