cve.bz

CWE-494: Download of Code Without Integrity Check, page 3

Filter

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

What the weakness is: CWE-494 at MITRE

Related attack patterns (CAPEC): 12
  • CAPEC-184 Software Integrity Attack Severity: Low
  • CAPEC-185 Malicious Software Download Severity: Very High
  • CAPEC-186 Malicious Software Update Severity: High
  • CAPEC-187 Malicious Automated Software Update via Redirection Likelihood: High · Severity: High
  • CAPEC-533 Malicious Manual Software Update Likelihood: Low · Severity: High
  • CAPEC-538 Open-Source Library Manipulation Likelihood: Low · Severity: High
  • CAPEC-657 Malicious Automated Software Update via Spoofing Likelihood: High · Severity: High
  • CAPEC-662 Adversary in the Browser (AiTB) Likelihood: High · Severity: Very High
  • CAPEC-691 Spoof Open-Source Software Metadata Likelihood: Medium · Severity: High
  • CAPEC-692 Spoof Version Control System Commit Metadata Likelihood: Medium · Severity: High
  • CAPEC-693 StarJacking Likelihood: Medium · Severity: High
  • CAPEC-695 Repo Jacking Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-494, as MITRE names them. Credits.

Ask an AI about CWE-494

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-494: Download of Code Without Integrity Check and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/494.html and https://cve.bz/cve/cwe/494?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.5CVE-2025-30199EPSS 0.3%

    ECOVACS vacuum robot base stations do not validate firmware updates, so malicious over-the-air updates can be sent to base station via insecure connection between robot and base station.

  2. 6.6CVE-2025-55582EPSS 0.3%

    D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch-dog.sh`, which blindly respawns binaries such as `dcp` and `signalc` without verifying integrity, authenticity, or permissions. An attacker wi…

  3. 9.2CVE-2025-35115EPSS 0.2%

    Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.

  4. 5.3CVE-2024-47192EPSS 0.2%

    An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker to download files that they do not have permission to download.

  5. 7.3CVE-2025-55581EPSS 0.2%

    D-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure implementation in the mydlink-watch-dog.sh script. The script monitors and respawns the `dcp` and `signalc` binaries without validating their integrit…

  6. 9.8CVE-2025-31355EPSS 0.3%

    A firmware update vulnerability exists in the Firmware Signature Validation functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicious file to…

  7. 8.6CVE-2025-53520EPSS 0.2%

    The affected product allows firmware updates to be downloaded from EG4's website, transferred via USB dongles, or installed through EG4's Monitoring Center (remote, cloud-connected interface) or via a serial connection, and can install …

  8. 9.3CVE-2025-53696EPSS 0.1%

    iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possib…

  9. 8.6CVE-2025-7620EPSS 0.3%

    The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability. If a user visits a malicious website while the component is active, remote attackers can cause th…

  10. 2.0CVE-2025-52937EPSS 0.1%

    Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C. This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specific…

  11. 9.8CVE-2025-28236EPSS 0.4%

    Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafte…

  12. 9.3CVE-2025-27593EPSS 0.4%

    The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.

  13. 6.5CVE-2024-43169EPSS 0.2%

    IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a user to download a malicious file without verifying the integrity of the code.

  14. 7.5CVE-2024-50696EPSS 0.2%

    SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is loca…

  15. 7.2CVE-2025-1058EPSS 0.2%

    CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded.

  16. 7.7CVE-2024-52331EPSS 0.2%

    ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.

  17. 2.5CVE-2024-42183EPSS 0.09%

    BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability. It could allow a malicious operator to download files from arbitrary URLs without any proper validation or allowlist controls.

  18. 6.5CVE-2024-55459EPSS 0.2%

    An issue in keras 3.7.0 allows attackers to write arbitrary files to the user's machine via downloading a crafted tar file through the get_file function.

  19. 8.5CVE-2024-54126EPSS 0.1%

    This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exp…

  20. 8.2CVE-2024-52583EPSS 0.2%

    The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page `schedule.html` before 17 November 2024 or commit 93dfb83 contains links to `Leostop`, a site that…

  21. 9.3CVE-2024-48974EPSS 0.2%

    The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality…

  22. 5.2CVE-2024-33660EPSS 0.1%

    An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.

  23. 8.1CVE-2024-45321EPSS 0.7%

    The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers.

  24. 7.3CVE-2024-39819EPSS 0.10%

    Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.

  25. 9.8CVE-2023-41921EPSS 0.3%

    A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the…

  26. 7.5CVE-2024-39348EPSS 0.3%

    Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

  27. 8.8CVE-2024-30206EPSS 0.3%

    A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All ver…

  28. 7.5CVE-2024-33118EPSS 0.2%

    LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.

  29. 8.8CVE-2023-39474EPSS 0.6%

    Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is…

  30. 9.6CVE-2024-28878EPSS 0.3%

    IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.

  31. 8.1CVE-2024-28850EPSS 0.2%

    WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permiss…

  32. 7.1CVE-2024-30205EPSS 0.5%

    In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.

  33. 9.8CVE-2024-27438EPSS 1.0%

    Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/…

  34. 8.8CVE-2023-47353EPSS 0.3%

    An issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows attackers to force the download of arbitrary files.

  35. 7.5CVE-2023-5592EPSS 0.3%

    Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device …

  36. 6.5CVE-2023-46144EPSS 0.3%

    A download of code without integrity check vulnerability in PLCnext products allows an remote attacker with low privileges to compromise integrity on the affected engineering station and the connected devices.

  37. 7.5CVE-2023-46143EPSS 0.3%

    Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.

  38. 4.9CVE-2023-5630EPSS 0.3%

    A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware.

  39. 8.1CVE-2023-45842EPSS 0.8%

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in t…

  40. 8.1CVE-2023-45841EPSS 0.8%

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in t…

  41. 8.1CVE-2023-45840EPSS 0.8%

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in t…

  42. 8.1CVE-2023-45839EPSS 0.8%

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in t…

  43. 8.1CVE-2023-45838EPSS 0.8%

    Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in t…

  44. 8.1CVE-2023-43608EPSS 0.8%

    A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.

  45. 7.5CVE-2023-46887EPSS 0.3%

    In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

  46. 4.9CVE-2023-5984EPSS 0.3%

    A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device.

  47. 9.8CVE-2023-45799EPSS 0.3%

    In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

  48. 6.3CVE-2023-45821EPSS 0.2%

    Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. During a security audit of Artifact Hub's code base a security researcher identified a bug in which the…

  49. 9.8CVE-2023-37220EPSS 0.3%

    Synel Terminals - CWE-494: Download of Code Without Integrity Check

  50. 9.8CVE-2023-4041EPSS 0.4%

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code I…