CWE-347: Improper Verification of Cryptographic Signature, page 13

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

What the weakness is: CWE-347 at MITRE

1. 8.1CVE-2023-43660EPSS 0.3%2023-09-27

   Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key offer without a signature. This allows bypassing authenticatio…

2. 5.5CVE-2023-42811EPSS 0.2%2023-09-22

   aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place_detached, the decrypted ciphertext (i.e. the correct plaintext) is exposed even…

3. 6.5CVE-2023-42806EPSS 0.5%2023-09-21

   Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the…

4. 7.8CVE-2023-20236EPSS 0.1%2023-09-13

   A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification.…

5. 7.0CVE-2023-20135EPSS 0.09%2023-09-13

   A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use (TOC…

6. 5.5CVE-2023-41764EPSS 1.0%2023-09-12

   Microsoft Office Spoofing Vulnerability

7. 7.8CVE-2023-40727EPSS 0.1%2023-09-12

   A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code.

8. 7.8CVE-2023-41744EPSS 0.1%2023-08-31

   Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.

9. 9.8CVE-2023-28801EPSS 0.4%2023-08-31

   An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privilege Escalation.This issue affects Admin UI: from 6.2 before 6.2r.

10. 4.7CVE-2023-36811EPSS 0.1%2023-08-30

    borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup…

11. 7.2CVE-2023-20266EPSS 0.5%2023-08-30

    A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, rem…

12. 4.3CVE-2023-41037EPSS 0.4%2023-08-29

    OpenPGP.js is a JavaScript implementation of the OpenPGP protocol. In affected versions OpenPGP Cleartext Signed Messages are cryptographically signed messages where the signed text is readable without special tools. These messages typical…

13. 8.8CVE-2023-23773EPSS 0.5%2023-08-29

    Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, ex…

14. 8.8CVE-2023-23772EPSS 0.5%2023-08-29

    Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code e…

15. 5.3CVE-2023-40178EPSS 0.5%2023-08-23

    Node-SAML is a SAML library not dependent on any frameworks that runs in Node. The lack of checking of current timestamp allows a LogoutRequest XML to be reused multiple times even when the current time is past the NotOnOrAfter. This could…

16. 6.5CVE-2021-43171EPSS 0.4%2023-08-22

    Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the…

17. 7.5CVE-2023-39393EPSS 0.2%2023-08-13

    Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten.

18. 7.5CVE-2023-39392EPSS 0.2%2023-08-13

    Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

19. 7.5CVE-2023-40012EPSS 0.2%2023-08-09

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Versions of uthenticode prior to the 2.x series did not check Extended Key Usages in certificates, in violation of the Authenticode X.50…

20. 9.8CVE-2023-39969EPSS 0.6%2023-08-09

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode sp…

21. 7.8CVE-2023-39211EPSS 0.2%2023-08-08

    Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access.

22. 7.8CVE-2023-38418EPSS 0.1%2023-08-02

    The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

23. 5.9CVE-2023-3347EPSS 0.4%2023-07-20

    A vulnerability was found in Samba's SMB2 packet signing mechanism. The SMB2 packet signing is not enforced if an admin configured "server signing = required" or for SMB2 connections to Domain Controllers where SMB2 packet signing is manda…

24. 6.5CVE-2023-33768EPSS 1.1%2023-07-13

    Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows attackers to cause a Denial of Service (DoS) via a crafted firmware file.

25. 5.3CVE-2023-35373EPSS 0.8%2023-07-11

    Mono Authenticode Validation Spoofing Vulnerability

26. 7.8CVE-2023-32449EPSS 0.1%2023-06-22

    Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature c…

27. 7.8CVE-2023-34120EPSS 0.1%2023-06-13

    Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potenti…

28. 7.7CVE-2023-28602EPSS 0.3%2023-06-13

    Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions.

29. 8.8CVE-2023-33959EPSS 0.4%2023-06-06

    notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry can cause users to verify the wrong artifact. The problem has been fixed in the release v1.0.0-rc.6. Users should upgr…

30. 9.1CVE-2023-34205EPSS 0.4%2023-05-30

    In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).

31. 5.4CVE-2023-33185EPSS 0.2%2023-05-26

    Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS t…

32. 7.8CVE-2022-4418EPSS 0.1%2023-05-18

    Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40208.

33. 7.5CVE-2023-25934EPSS 0.3%2023-05-04

    DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the request could potentially exploit this vulnerability to modify the body data of the r…

34. 4.3CVE-2023-1204EPSS 0.5%2023-05-03

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A user could use an unverified email as …

35. 5.5CVE-2023-28228EPSS 0.5%2023-04-11

    Windows Spoofing Vulnerability

36. 5.3CVE-2023-28226EPSS 0.7%2023-04-11

    Windows Enroll Engine Security Feature Bypass Vulnerability

37. 5.3CVE-2023-28818EPSS 0.2%2023-03-24

    An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could…

38. 9.8CVE-2023-28610EPSS 0.6%2023-03-23

    The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update image. This allows a remote attacker to gain root access to the system.

39. 5.9CVE-2023-28113EPSS 0.6%2023-03-16

    russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentialit…

40. 7.8CVE-2022-20929EPSS 0.2%2023-03-10

    A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to …

41. 7.8CVE-2023-20940EPSS 0.06%2023-02-28

    In the Android operating system, there is a possible way to replace a boot partition due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

42. 4.3CVE-2021-43074EPSS 0.3%2023-02-16

    An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions, 6.0 all versions; FortiOS 7.0.3 and below, 6.4.8 and below, 6.2 all versions, 6…

43. 9.8CVE-2023-25718EPSS 0.7%2023-02-13

    In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the signature, such as instructions that result in offering the end …

44. 9.8CVE-2021-36226EPSS 0.8%2023-02-06

    Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

45. 5.3CVE-2023-23940EPSS 0.2%2023-02-03

    OpenZeppelin Contracts for Cairo is a library for secure smart contract development written in Cairo for StarkNet, a decentralized ZK Rollup. `is_valid_eth_signature` is missing a call to `finalize_keccak` after calling `verify_eth_signatu…

46. 7.8CVE-2022-34459EPSS 0.1%2023-02-01

    Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerabili…

47. 9.8CVE-2023-23928EPSS 0.5%2023-02-01

    reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could ex…

48. 9.8CVE-2022-23334EPSS 0.4%2023-01-30

    The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE.

49. 5.9CVE-2023-22742EPSS 0.6%2023-01-20

    libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set …

50. 7.5CVE-2023-24025EPSS 0.6%2023-01-20

    CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signatures via a template side-channel attack because of intermediate data leakage of one vector.