Advisories · Weakness
CWE-940.
Every Advisory and CVE whose sources give the weakness CWE-940, newest first.
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary code via the Routing functionality.
- CWE-940
- CVSS 6.5 Medium
An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functionality and ICMP packet handling.
- CWE-940
- CVSS 5.2 Medium
Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks.
- CWE-940
- CVSS 4.1 Medium
Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks.
- CWE-940
- CVSS 6.3 Medium
TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks.
- CWE-940
- CVSS 6.5 Medium
CVE-2023-7004
- Sciener TTLock App
- CWE-940
- CVSS 8.4 High
Element Android Intent Redirection
- element-hq element-android
- CWE-923
- CWE-940
- CVSS 6.3 Medium
PAN-OS: Improper IP Address Verification in GlobalProtect Gateway
- Palo Alto Networks PAN-OS
- Palo Alto Networks Prisma Access
- CWE-940
- CVSS 7.5 High
Siemens SIMATIC CP 343-1: A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All…
- Siemens SIMATIC CP 343-1
- Siemens SIMATIC CP 343-1 Lean
- CWE-940
- CVSS 8.8 High
TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation
- TAIWAN-CA(TWCA) JCICSecurityTool
- CWE-940
- CVSS 9.8 CriticalCritical · CVSS 9+
Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation
- Chunghwa Telecom NOKIA G-040W-Q
- CWE-940
- CVSS 10.0 CriticalCritical · CVSS 9+
Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
- Silicon Labs Ember ZNet
- CWE-940
- CVSS 8.8 High
CODESYS: Missing integrity check in CODESYS Development System
- CODESYS Development System
- CWE-940
- CVSS 6.3 Medium
Improper Verification of Source of a Communication Channel in Apache Tomcat
- CWE-940
>=7.0.0, <7.0.68 || >=8.0.0, <8.0.32 || >=9.0.0M1, <9.0.0.M3 · fixed in 7.0.68, 8.0.32, 9.0.0.M3
GHSA-9hjv-9h75-xmpp · CVE-2016-0763 - CVSS 6.1 Medium
Improper Verification of Communication Channel in @theia/plugin-ext
- CWE-940
<1.18.0 · fixed in 1.18.0
GHSA-w6v7-w58j-pg5r · CVE-2021-41038