cve.bz

CWE-354: Improper Validation of Integrity Check Value, page 5

Filter

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message.

What the weakness is: CWE-354 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-75 Manipulating Writeable Configuration Files Likelihood: High · Severity: Very High
  • CAPEC-145 Checksum Spoofing Severity: Medium
  • CAPEC-463 Padding Oracle Crypto Attack Severity: High

The attack patterns MITRE's CAPEC relates to CWE-354, as MITRE names them. Credits.

Ask an AI about CWE-354

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-354: Improper Validation of Integrity Check Value and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/354.html and https://cve.bz/cve/cwe/354?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2012-1170EPSS 0.9%

    Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

  2. 8.1CVE-2019-13496EPSS 0.9%

    One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response.

  3. 5.9CVE-2019-1166EPSS 68%

    A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vulnerability'.

  4. 7.8CVE-2019-0071EPSS 0.2%

    Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem w…

  5. 7.8CVE-2019-11753EPSS 0.2%

    The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotecte…

  6. 5.5CVE-2019-1163EPSS 1.5%

    A security feature bypass exists when Windows incorrectly validates CAB file signatures. An attacker who successfully exploited this vulnerability could inject code into a CAB file without invalidating the file's signature. To exploit the …

  7. 3.1CVE-2019-10155EPSS 0.5%

    The Libreswan Project has found a vulnerability in the processing of IKEv1 informational exchange packets which are encrypted and integrity protected using the established IKE SA encryption and integrity keys, but as a receiver, the integr…

  8. 7.8CVE-2019-12097EPSS 0.6%

    Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the original EnableLoopback.exe.

  9. 7.8CVE-2018-6336EPSS 0.5%

    An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the…

  10. 8.2CVE-2017-3224EPSS 1.1%

    Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is det…

  11. 5.9CVE-2018-1000159EPSS 0.8%

    tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslite/utils/constanttime.py: ct_check_cbc_m…

  12. 4.4CVE-2018-5382EPSS 0.3%

    The default BKS keystore use an HMAC that is only 16 bits long, which can allow an attacker to compromise the integrity of a BKS keystore. Bouncy Castle release 1.47 changes the BKS format to a format which uses a 160 bit HMAC instead. Thi…

  13. 7.8CVE-2018-5441EPSS 0.3%

    An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Ver…

  14. 9.8CVE-2017-15994EPSS 1.0%

    rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, …

  15. 8.1CVE-2017-3760EPSS 0.8%

    The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possib…

  16. 3.1CVE-2017-12973EPSS 0.6%

    Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.

  17. 5.5CVE-2017-9498EPSS 0.2%

    The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arbitrary firmware images to an XR11 by leveraging root access. In other words, the…

  18. 7.3CVE-2017-9606EPSS 0.3%

    Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction wi…

  19. 8.8CVE-2017-4961EPSS 0.5%

    An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In certain cases an authenticated Director user can provide a malicious checksum that could allow them to escalate their…