400 matches found
CVE-2025-31144
Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...
CVE-2025-31144: Improper Restriction of Communication Channel to Intended Endpoints
Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system where the product is running...
PT-2025-16980 · Unknown · Work Desktop For Mac
Name of the Vulnerable Software and Affected Versions: Work Desktop for Mac versions 10.8.1.46 and earlier Description: The issue is related to improper verification of the source of a communication channel, allowing attackers to execute arbitrary commands via unauthorized access to the Agent...
CVE-2024-26013
A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and...
CVE-2025-29986
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...
CVE-2024-26013
The CVE-2024-26013 entry describes an improper restriction of a communication channel to intended endpoints (CWE-923) in multiple Fortinet products. Affected products and versions include FortiOS: 7.4.0–7.4.4, 7.2.0–7.2.8, 7.0.0–7.0.15, 6.4.0–6.4.15 and before 6.2.16; FortiProxy: 7.4.0–7.4.2, 7.2...
CVE-2024-26013
A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and...
CVE-2025-29986
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...
CVE-2025-29986
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...
CVE-2025-29986: Improper Restriction of Communication Channel to Intended Endpoints
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...
Dell Common Event Enabler 安全漏洞
Dell Common Event Enabler is a framework from Dell USA. An unauthorized access vulnerability exists in Dell Common Event Enabler. The vulnerability stems from a communication channel that does not properly restrict the target endpoint, resulting in unauthorized access. An attacker could exploit...
CVE-2024-39271
CVE-2024-39271 affects Intel PROSet/Wireless WiFi and Killer WiFi software prior to version 23.80. The root cause is improper restriction of the communication channel to intended endpoints, which could allow an unauthenticated adjacent user to disclose information. Multiple sources (Intel advisor...
CVE-2022-4847
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4848
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2024-12399
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...
CVE-2022-43916: Improper Restriction of Communication Channel to Intended Endpoints
IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure...
CVE-2024-12399
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...
CVE-2024-12399
The CVE-2024-12399 entry concerns Schneider Electric Pro-face GP‑Pro EX and Remote HMI. The underlying issue is improper enforcement of message integrity during transmission in a communication channel, which could enable a man‑in‑the‑middle attack and lead to partial loss of confidentiality, inte...
CVE-2024-12399
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle attack by intercepting the communication...
CVE-2024-36506
An improper verification of source of a communication channel vulnerability CWE-940 in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection...