cve.bz

CWE-494: Download of Code Without Integrity Check, page 4

Filter

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

What the weakness is: CWE-494 at MITRE

Related attack patterns (CAPEC): 12
  • CAPEC-184 Software Integrity Attack Severity: Low
  • CAPEC-185 Malicious Software Download Severity: Very High
  • CAPEC-186 Malicious Software Update Severity: High
  • CAPEC-187 Malicious Automated Software Update via Redirection Likelihood: High · Severity: High
  • CAPEC-533 Malicious Manual Software Update Likelihood: Low · Severity: High
  • CAPEC-538 Open-Source Library Manipulation Likelihood: Low · Severity: High
  • CAPEC-657 Malicious Automated Software Update via Spoofing Likelihood: High · Severity: High
  • CAPEC-662 Adversary in the Browser (AiTB) Likelihood: High · Severity: Very High
  • CAPEC-691 Spoof Open-Source Software Metadata Likelihood: Medium · Severity: High
  • CAPEC-692 Spoof Version Control System Commit Metadata Likelihood: Medium · Severity: High
  • CAPEC-693 StarJacking Likelihood: Medium · Severity: High
  • CAPEC-695 Repo Jacking Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-494, as MITRE names them. Credits.

Ask an AI about CWE-494

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-494: Download of Code Without Integrity Check and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/494.html and https://cve.bz/cve/cwe/494?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2023-40254EPSS 0.2%

    Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0…

  2. 7.2CVE-2023-37864EPSS 0.4%

    In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.

  3. 4.3CVE-2023-29401EPSS 0.5%

    The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-D…

  4. 5.3CVE-2023-28317EPSS 0.2%

    A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order.

  5. 6.5CVE-2023-24503EPSS 0.2%

    Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

  6. 6.5CVE-2023-24500EPSS 0.2%

    Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW.

  7. 7.8CVE-2023-22635EPSS 0.1%

    A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions…

  8. 7.5CVE-2023-27025EPSS 0.3%

    An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.

  9. 5.3CVE-2023-28818EPSS 0.2%

    An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. The application upgrade process included unsigned files that could be exploited and result in a customer installing unauthentic components. A malicious actor could…

  10. 9.8CVE-2023-27574EPSS 0.4%

    ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.

  11. 7.4CVE-2023-23110EPSS 0.6%

    An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to m…

  12. 9.8CVE-2020-22658EPSS 0.5%

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) befo…

  13. 9.8CVE-2020-22654EPSS 0.4%

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) befo…

  14. 9.8CVE-2022-24117EPSS 0.4%

    Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

  15. 4.8CVE-2022-46430EPSS 0.4%

    TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.

  16. 4.8CVE-2022-46428EPSS 0.4%

    TP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.

  17. 8.1CVE-2022-46423EPSS 0.4%

    An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing atta…

  18. 6.5CVE-2022-37908EPSS 0.3%

    An authenticated attacker can impact the integrity of the ArubaOS bootloader on 7xxx series controllers. Successful exploitation can compromise the hardware chain of trust on the impacted controller.

  19. 6.5CVE-2022-4261EPSS 0.3%

    Rapid7 Nexpose and InsightVM versions prior to 6.6.172 failed to reliably validate the authenticity of update contents. This failure could allow an attacker to provide a malicious update and alter the functionality of Rapid7 Nexpose. The a…

  20. 8.8CVE-2022-40799KEVEPSS 34%

    Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.

  21. 8.8CVE-2022-45442EPSS 0.7%

    Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Con…

  22. 6.1CVE-2022-38199EPSS 0.3%

    A remote file download issue can occur in some capabilities of Esri ArcGIS Server web services that may in some edge cases allow a remote, unauthenticated attacker to induce an unsuspecting victim to launch a process in the victim's PATH e…

  23. 6.5CVE-2022-31324EPSS 0.5%

    An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.

  24. 7.5CVE-2021-45027ExploitEPSS 2.0%

    An arbitrary file download vulnerability in Oliver v5 Library Server Versions < 5.00.008.053 via the FileServlet function allows for arbitrary file download by an attacker using unsanitized user supplied input.

  25. 7.5CVE-2022-36671EPSS 0.5%

    Novel-Plus v3.6.2 was discovered to contain an arbitrary file download vulnerability via the background file download API.

  26. 7.5CVE-2021-26639EPSS 0.5%

    This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

  27. 8.8CVE-2022-36359EPSS 0.9%

    An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when…

  28. 6.6CVE-2022-24140EPSS 0.7%

    IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in order to download a config file. After downloading the config file, the products …

  29. 6.7CVE-2021-35532EPSS 0.2%

    A vulnerability exists in the file upload validation part of Hitachi Energy TXpert Hub CoreTec 4 product. The vulnerability allows an attacker or malicious agent who manages to gain access to the system and obtain an account with sufficien…

  30. 8.1CVE-2022-27438EPSS 2.1%

    Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check f…

  31. 8.8CVE-2022-28944EPSS 1.6%

    Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Package Builder for Windows 9.1.4 and Remote Installer for Windows 6.0.13 and Ping Monitor for Windows 8.0.18 and Remote Sh…

  32. 6.5CVE-2021-41714EPSS 0.7%

    In Tipask < 3.5.9, path parameters entered by the user are not validated when downloading attachments, a registered user can download arbitrary files on the Tipask server such as .env, /etc/passwd, laravel.log, causing infomation leakage.

  33. 8.8CVE-2022-22786EPSS 1.5%

    The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a …

  34. 8.8CVE-2022-24644EPSS 1.9%

    ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse.

  35. 7.8CVE-2021-44168KEVEPSS 0.9%

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packa…

  36. 9.8CVE-2020-7883EPSS 1.0%

    Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

  37. 8.8CVE-2020-7875EPSS 0.6%

    DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. This can be leveraged for code execution.

  38. 8.8CVE-2020-7874EPSS 0.6%

    Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of f…

  39. 9.8CVE-2020-7873EPSS 0.6%

    Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary file download and execution.

  40. 5.5CVE-2021-30669EPSS 0.4%

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application may bypass Gatekeeper checks.

  41. 5.5CVE-2021-30658EPSS 0.4%

    This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Big Sur 11.3. A malicious application may bypass Gatekeeper checks.

  42. 8.1CVE-2021-38588EPSS 0.4%

    In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587).

  43. 8.1CVE-2021-33879EPSS 1.2%

    Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one poi…

  44. 6.6CVE-2021-3485EPSS 0.9%

    An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code e…

  45. 7.2CVE-2020-29032EPSS 0.5%

    Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022

  46. 9.8CVE-2020-2320EPSS 0.9%

    Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.

  47. 5.5CVE-2020-25266EPSS 0.3%

    AppImage appimaged before 1.0.3 does not properly check whether a downloaded file is a valid appimage. For example, it will accept a crafted mp3 file that contains an appimage, and install it.

  48. 9.8CVE-2020-28332EPSS 1.1%

    Barco wePresent WiPG-1600W devices download code without an Integrity Check. Affected Version(s): 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W firmware does not perform verification of digitally signed firmware upd…

  49. 8.8CVE-2020-28213EPSS 1.2%

    A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests…

  50. 7.5CVE-2020-15604EPSS 1.4%

    An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another attack to trick an affected client into d…