Improper Validation of Integrity Check Value
CWE-354
The product does not validate or incorrectly validates the integrity check values or checksums of a message.
We track 84 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
How this weakness is prevented
- Implementation: The protocol specification describes the algorithm used for calculating the checksum. It is then a matter of implementing the calculation and verifying that the calculated checksum and the received checksum match.
Latest Improper Validation of Integrity Check Value vulnerabilities
- 9.0 High severity
RAD-ISM-900-EN-BD/B: Improper Validation of Integrity Check Value
On various RAD-ISM-900-EN-* devices by PHOENIX CONTACT an admin user could use the configuration file uploader in the WebUI to execute arbitrary code with root privileges on the OS due to an improper validation of an integrity check value in all versions of th
- 8.8 High severity
go-tuf: Improper Validation of Integrity Check Value
go-tuf is a Go implementation of The Update Framework (TUF). go-tuf does not correctly implement the client workflow for updating the metadata files for roles other than the root role. Specifically, checks for rollback attacks are not implemented correctly mea
- 7.5 High severity
Zoom Client for Meetings for MacOS (Standard…: Improper Validation of Integrity Check Value
The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version t
- 7.5 High severity
HarmonyOS: Improper Validation of Integrity Check Value
The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.