CyberSecBulletin

Improper Protection for Outbound Error Messages and Alert Signals

CWE-1320

Untrusted agents can disable alerts about signal conditions exceeding limits or the response mechanism that handles such alerts.

We track 6 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.9.

How this weakness is prevented

  • Architecture and Design: Alert signals generated by critical events should be protected from access by untrusted agents. Only hardware or trusted firmware modules should be able to alter the alert configuration.

Latest Improper Protection for Outbound Error Messages and Alert Signals vulnerabilities