cve.bz

CWE-494: Download of Code Without Integrity Check, page 5

Filter

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

What the weakness is: CWE-494 at MITRE

Related attack patterns (CAPEC): 12
  • CAPEC-184 Software Integrity Attack Severity: Low
  • CAPEC-185 Malicious Software Download Severity: Very High
  • CAPEC-186 Malicious Software Update Severity: High
  • CAPEC-187 Malicious Automated Software Update via Redirection Likelihood: High · Severity: High
  • CAPEC-533 Malicious Manual Software Update Likelihood: Low · Severity: High
  • CAPEC-538 Open-Source Library Manipulation Likelihood: Low · Severity: High
  • CAPEC-657 Malicious Automated Software Update via Spoofing Likelihood: High · Severity: High
  • CAPEC-662 Adversary in the Browser (AiTB) Likelihood: High · Severity: Very High
  • CAPEC-691 Spoof Open-Source Software Metadata Likelihood: Medium · Severity: High
  • CAPEC-692 Spoof Version Control System Commit Metadata Likelihood: Medium · Severity: High
  • CAPEC-693 StarJacking Likelihood: Medium · Severity: High
  • CAPEC-695 Repo Jacking Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-494, as MITRE names them. Credits.

Ask an AI about CWE-494

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-494: Download of Code Without Integrity Check and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/494.html and https://cve.bz/cve/cwe/494?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.9CVE-2020-1595EPSS 2.0%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Sh…

  2. 8.5CVE-2020-1576EPSS 1.6%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …

  3. 8.6CVE-2020-1453EPSS 2.2%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …

  4. 8.6CVE-2020-1452EPSS 2.2%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …

  5. 9.9CVE-2020-1210EPSS 1.9%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …

  6. 8.6CVE-2020-1200EPSS 2.1%

    <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the …

  7. 8.8CVE-2020-7831EPSS 0.9%

    A vulnerability in the web-based contract management service interface Ebiz4u of INOGARD could allow an victim user to download any file. The attacker is able to use startup menu directory via directory traversal for automatic execution. T…

  8. 7.8CVE-2020-7817EPSS 0.3%

    MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity verification of the files.

  9. 7.5CVE-2020-5772EPSS 1.1%

    Improper Input Validation in Teltonika firmware TRB2_R_00.02.04.01 allows a remote, authenticated attacker to gain root privileges by uploading a malicious package file.

  10. 8.8CVE-2020-10926EPSS 1.2%

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists wit…

  11. 8.1CVE-2020-4125EPSS 0.4%

    Using HCL Marketing Operations 9.1.2.4, 10.1.x, 11.1.0.x, a malicious attacker could download files from the RHEL environment by doing some modification in the link, giving the attacker access to confidential information.

  12. 9.8CVE-2020-7826EPSS 0.7%

    EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to the vulnerable method. This can be leveraged for code execution. When the vulnerab…

  13. 7.2CVE-2020-7505EPSS 0.9%

    A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on …

  14. 9.8CVE-2020-7812EPSS 0.7%

    Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for …

  15. 9.8CVE-2020-7813EPSS 0.7%

    Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be le…

  16. 8.8CVE-2020-9474EPSS 1.9%

    The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the backup functionality in the web frontend. By using an exploit chain, an attacker with access to the network can get root access on the gateway.

  17. 9.8CVE-2020-7806EPSS 0.7%

    Tobesoft Xplatform 9.2.2.250 and earlier version have an arbitrary code execution vulnerability by using method supported by Xplatform ActiveX Control. It allows attacker to cause remote code execution.

  18. 9.8CVE-2019-19167EPSS 0.7%

    Tobesoft Nexacro v2019.9.25.1 and earlier version have an arbitrary code execution vulnerability by using method supported by Nexacro14 ActiveX Control. It allows attacker to cause remote code execution.

  19. 7.8CVE-2019-19166EPSS 0.4%

    Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution.

  20. 7.2CVE-2019-19165EPSS 0.6%

    AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX…

  21. 8.1CVE-2020-5867EPSS 0.5%

    In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages

  22. 7.8CVE-2020-9759EPSS 0.5%

    A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through cr…

  23. 9.1CVE-2020-9751EPSS 0.5%

    Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade.

  24. 8.1CVE-2020-8809EPSS 1.2%

    Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/fi…

  25. 7.5CVE-2020-5398EPSS 88%

    In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in t…

  26. 5.5CVE-2010-3440EPSS 0.3%

    babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files.

  27. 7.5CVE-2019-3977EPSS 1.1%

    RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can trick the router into "upgrading" to an olde…

  28. 7.8CVE-2019-9534EPSS 0.2%

    The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This could allow an unauthenticated, local a…

  29. 5.3CVE-2019-14845EPSS 0.4%

    A vulnerability was found in OpenShift builds, versions 4.1 up to 4.3. Builds that extract source from a container image, bypass the TLS hostname verification. An attacker can take advantage of this flaw by launching a man-in-the-middle at…

  30. 7.5CVE-2019-16760EPSS 1.3%

    Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the `package` configuration key. Usage of the `package` key to rename dependencies in `Cargo.toml` is ignored in Rust 1.25.0 and prior. When Rust 1…

  31. 7.2CVE-2019-13534EPSS 0.7%

    Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Firmware A.01.09, Part #: N/A (Replaced by Version C) and WLAN Version B, Firmware…

  32. 8.8CVE-2019-12809EPSS 1.0%

    Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for co…

  33. 7.8CVE-2019-12162EPSS 0.3%

    Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code execution or local privilege escalation by replacing the original update.exe.

  34. 7.5CVE-2019-5982EPSS 0.4%

    Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a mali…

  35. 8.3CVE-2019-7229EPSS 1.1%

    The ABB CP635 HMI uses two different transmission methods to upgrade its firmware and its software components: "Utilization of USB/SD Card to flash the device" and "Remote provisioning process via ABB Panel Builder 600 over FTP." Neither o…

  36. 8.1CVE-2019-12728EPSS 1.0%

    Grails before 3.3.10 used cleartext HTTP to resolve the SDKMan notification service. NOTE: users' apps were not resolving dependencies over cleartext HTTP.

  37. 9.8CVE-2018-5409EPSS 1.1%

    The PrinterLogic Print Management software, versions up to and including 18.3.1.96, updates and executes the code without sufficiently verifying the origin and integrity of the code. An attacker can execute malicious code by compromising t…

  38. 8.1CVE-2019-10249EPSS 0.7%

    All Xtext & Xtend versions prior to 2.18.0 were built using HTTP instead of HTTPS file transfer and thus the built artifacts may have been compromised.

  39. 9.8CVE-2019-3801EPSS 0.6%

    Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure protocol to fetch dependencies when building. A remote unauthenticated malicious attacker could hijack the DNS entry for the dependenc…

  40. 8.1CVE-2019-10248EPSS 0.4%

    Eclipse Vorto versions prior to 0.11 resolved Maven build artifacts for the Xtext project over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build artifacts…

  41. 7.8CVE-2018-4009EPSS 0.4%

    An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would n…

  42. 8.1CVE-2019-10240EPSS 0.4%

    Eclipse hawkBit versions prior to 0.3.0M2 resolved Maven build artifacts for the Vaadin based UI over HTTP instead of HTTPS. Any of these dependent artifacts could have been maliciously compromised by a MITM attack. Hence produced build ar…

  43. 8.8CVE-2018-19234EPSS 3.3%

    The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.

  44. 9.8CVE-2018-14620EPSS 0.6%

    The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage. This could potentially allow an attacker to serve malicious code to the image builder and install in the resulta…

  45. 9.8CVE-2016-6567EPSS 2.9%

    SHDesigns' Resident Download Manager provides firmware update capabilities for Rabbit 2000/3000 CPU boards, which according to the reporter may be used in some industrial control and embedded applications. The Resident Download Manager doe…

  46. 8.1CVE-2016-6564EPSS 2.6%

    Android devices with code from Ragentek contain a privileged binary that performs over-the-air (OTA) update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as …

  47. 8.1CVE-2018-13012EPSS 0.5%

    Download of code with improper integrity check in snsupd.exe and upd.exe in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite before 4.4.12 allows the remote attacker to e…

  48. 5.9CVE-2017-12740EPSS 0.6%

    Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via an unprotected communication channel. This could allow a remote attacker to manipulate the software package while perfor…

  49. 3.1CVE-2017-2739EPSS 0.2%

    The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle (MITM) can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications.

  50. 7.1CVE-2017-2707EPSS 0.3%

    Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to d…