cve.bz

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints, page 2

Filter

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

What the weakness is: CWE-923 at MITRE. All weaknesses

Related attack patterns (CAPEC): 4
  • CAPEC-161 Infrastructure Manipulation Severity: High
  • CAPEC-481 Contradictory Destinations in Traffic Routing Schemes Likelihood: Medium · Severity: High
  • CAPEC-501 Android Activity Hijack Severity: Medium
  • CAPEC-697 DHCP Spoofing Likelihood: Low · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-923, as MITRE names them. Credits.

Ask an AI about CWE-923

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-923: Improper Restriction of Communication Channel to Intended Endpoints and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/923.html and https://cve.bz/cve/cwe/923?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2025-20261EPSS 0.5%

    A vulnerability in the SSH connection handling of Cisco Integrated Management Controller (IMC) for Cisco UCS B-Series, UCS C-Series, UCS S-Series, and UCS X-Series Servers could allow an authenticated, remote attacker to access internal se…

  2. 6.8CVE-2025-48999EPSS 11%

    DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, `getUrlType()` retrieves `hostName`. Since the judgment statement…

  3. 6.8CVE-2025-46566EPSS 0.8%

    DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.9, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.9.

  4. 5.5CVE-2025-32886EPSS 0.1%

    An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. All packets sent over RF are also sent over UART with USB Shell, allowing someone with local access to gain information about the protocol and intercept sens…

  5. 7.6CVE-2025-23178EPSS 0.3%

    CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

  6. 6.9CVE-2025-31144EPSS 0.5%

    Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. If exploited, a remote unauthenticated attacker may attempt to log in to an arbitrary host via Windows system wher…

  7. 7.5CVE-2024-26013EPSS 0.5%

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet Fort…

  8. 8.3CVE-2025-29986EPSS 0.3%

    Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could …

  9. 2.0CVE-2024-39271EPSS 0.3%

    Improper restriction of communication channel to intended endpoints in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via a…

  10. 9.1CVE-2022-43916EPSS 0.3%

    IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods th…

  11. 6.5CVE-2024-22315EPSS 0.2%

    IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.

  12. 7.7CVE-2024-47490EPSS 0.6%

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network based attacker to cause i…

  13. 7.3CVE-2024-43571EPSS 0.6%

    Sudo for Windows Spoofing Vulnerability

  14. 7.6CVE-2024-47125EPSS 0.1%

    The goTenna Pro App does not authenticate public keys which allows an unauthenticated attacker to manipulate messages. It is advised to update your app to the current release for enhanced encryption protocols.

  15. 9.8CVE-2024-41889EPSS 0.7%

    Multiple Pimax products accept WebSocket connections from unintended endpoints. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker.

  16. 6.9CVE-2024-39537EPSS 0.3%

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network-based attacker to cause a limited information disclosure and av…

  17. 7.3CVE-2024-6222EPSS 0.6%

    In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 htt…

  18. 7.5CVE-2024-24974EPSS 9.8%

    The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

  19. 6.3CVE-2024-36252EPSS 0.2%

    Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is inst…

  20. 7.5CVE-2024-34446EPSS 0.6%

    Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a tunnel), and thus DNS traffic can leave the device. Data showing that the affected device was the origin of sensitive D…

  21. 7.8CVE-2024-26131EPSS 0.5%

    Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Po…

  22. 9.1CVE-2023-28078EPSS 0.9%

    Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a pos…

  23. 5.3CVE-2023-44195EPSS 0.5%

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon (nsagentd) of Juniper Networks Junos OS Evolved allows an unauthenticated network based attacker to cause limited impact …

  24. 6.8CVE-2023-25518EPSS 0.3%

    NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of t…

  25. 5.5CVE-2022-38125EPSS 0.2%

    Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.

  26. 7.2CVE-2023-28971EPSS 0.4%

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (PAA) (Formerly Netrounds) allows an attacker to bypass existing firewall rules an…

  27. 5.3CVE-2023-29108EPSS 0.4%

    The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.

  28. 6.1CVE-2022-2837EPSS 0.4%

    A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.

  29. 4.4CVE-2022-2835EPSS 0.2%

    A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

  30. 5.3CVE-2022-2663EPSS 4.1%

    An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc con…

  31. 4.6CVE-2022-30729EPSS 0.1%

    Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner.

  32. 8.8CVE-2021-38487EPSS 3.4%

    RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic. This may result in a denial-of-service…

  33. 5.3CVE-2021-32004EPSS 0.6%

    This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

  34. 6.3CVE-2021-32635EPSS 1.4%

    Singularity is an open source container platform. In verions 3.7.2 and 3.7.3, Dde to incorrect use of a default URL, `singularity` action commands (`run`/`shell`/`exec`) specifying a container using a `library://` URI will always attempt t…

  35. 9.8CVE-2019-17440EPSS 1.7%

    Improper restriction of communications to Log Forwarding Card (LFC) on PA-7000 Series devices with second-generation Switch Management Card (SMC) may allow an attacker with network access to the LFC to gain root access to PAN-OS. This issu…

  36. 7.1CVE-2018-10596EPSS 1.3%

    Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initial…

  37. 9.6CVE-2017-3891EPSS 1.3%

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to acc…