Unprotected Alternate Channel
CWE-420
The product protects a primary channel, but it does not use the same level of protection for an alternate channel.
We track 18 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.6. 2 have been exploited in real attacks.
How this weakness is prevented
- Architecture and Design: Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.
Latest Unprotected Alternate Channel vulnerabilities
- 8.2 High severity
EOS: Unprotected Alternate Channel
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules against unexpected BGP peering attempts.
- 7.8 High severity
Beckhoff.Device.Manager.XAR: Unprotected Alternate Channel
A local low privileged attacker can bypass the authentication of the Device Manager user interface, allowing them to perform privileged operations and gain administrator access.
- 7.5 High severity
Comfyui-manager: Unprotected Alternate Channel
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web
- 8.8 High severity
Ransomware Containment: Unprotected Alternate Channel
BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids
- 9.8 Critical severity
Twonky Server: Unprotected Alternate Channel
Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.
- 8.0 High severity
Figma MCP Server: Unprotected Alternate Channel
Framelink Figma MCP Server before 0.6.3 allows an unauthenticated remote attacker to execute arbitrary operating system commands via a crafted HTTP POST request with shell metacharacters in input that is used by a fetchWithRetry curl command. The vulnerable en
- 8.8 High severity
XClarity Orchestrator (LXCO): Unprotected Alternate Channel
An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to cre
- 7.4 High severity
Windows: Unprotected Alternate Channel
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entries that specify only the to-be-signed (TBS) part of the code signer certificate are properly blocked, but entries that specify the signing cer
- 9.8 Critical severity
CrushFTP Unprotected Alternate Channel Exploited
CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation and consequently allows remote attackers to obtain admin access via HTTPS, as exploited in the wild in July 2025.
- 9.9 Critical severity
InnoShop: Unprotected Alternate Channel
In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. Th
- 7.8 High severity
Personal Communications: Unprotected Alternate Channel
IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation (LPE). The vulnerability allows any interactively logged in users on the target computer to run commands with full privileges in the context of N
- 8.1 High severity
PT9030-15: Unprotected Alternate Channel
A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This vulnerability has been assigned a (CVE)ID:CVE-2023-52718
- 8.1 High severity
TC7001-10: Unprotected Alternate Channel
Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulnerability has been assigned a (CVE)ID:CVE-2023-7266
- 10.0 Critical severity
CodeChecker: Authentication Bypass Using an Alternate Path or Channel
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication bypass occurs when the API URL ends with Authentication. This bypass allows superuser access to all API endpoints other than A
- 7.3 High severity
ControlLogix® 5580 (1756-L8z): Unprotected Alternate Channel
A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1756 chassis, a threat actor could potentially execute CIP co
- 10.0 Critical severity
Cisco IOS XE Web UI Privilege Escalation Exploited
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors e
- 8.8 High severity
MeasurementLink: Unprotected Alternate Channel
An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement p
- 8.7 High severity
moby: Observable Discrepancy
Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component (`dockerd`), which is developed as moby/moby, is commonly r