Download of Code Without Integrity Check
CWE-494
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
We track 122 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.4. 4 have been exploited in real attacks.
How this weakness is prevented
- Implementation: Perform proper forward and reverse DNS lookups to detect DNS spoofing.
- Architecture and Design Operation: Encrypt the code with a reliable encryption scheme before transmitting.
- Architecture and Design Operation: Run your code using the lowest privileges that are required to accomplish the necessary tasks. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment. For example, database applications rarely need to run as the database administrator, especially in day-to-day operations.
Latest Download of Code Without Integrity Check vulnerabilities
- 9.3 Critical severity
iSTAR Ultra: Download of Code Without Integrity Check
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.
- 8.8 High severity
Cross-browser Components for Official Document…: Download of Code Without Integrity Check
The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability. If a user visits a malicious website while the component is active, remote attackers can cause the system to download
- 9.3 Critical severity
SICK DL100-2xxxxxxx: Download of Code Without Integrity Check
The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.
- 7.5 High severity
Winet-s Firmware: Download of Code Without Integrity Check
SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a specific MQTT message allows an update to an inverter or a WiNet connectivity dongle with a bogus firmware file that is located on attacker-contr
- 7.5 High severity
Unspecified robots: Use of a Broken or Risky Cryptographic Algorithm
ECOVACS robot lawnmowers and vacuums use a deterministic symmetric key to decrypt firmware updates. An attacker can create and encrypt malicious firmware that will be successfully decrypted and installed by the robot.
- 8.5 High severity
Archer C50 Wireless Router: Improper Verification of Cryptographic Signature
This vulnerability exists in the TP-Link Archer C50 due to improper signature verification mechanism in the firmware upgrade process at its web interface. An attacker with administrative privileges within the router’s Wi-Fi range could exploit this vulnerabili
- 8.2 High severity
WesHacks: Download of Code Without Integrity Check
The WesHacks GitHub repository provides the official Hackathon competition website source code for the Muweilah Wesgreen Hackathon. The page `schedule.html` before 17 November 2024 or commit 93dfb83 contains links to `Leostop`, a site that hosts a malicious in
- 9.3 Critical severity
Life2000 Ventilation System: Download of Code Without Integrity Check
The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a comprom
- 7.3 High severity
Zoom Workplace Apps and SDK for Windows: Download of Code Without Integrity Check
Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access.
- 9.8 Critical severity
P1/P2: Download of Code Without Integrity Check
A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uplo
- 7.5 High severity
Synology Router Manager (SRM): Download of Code Without Integrity Check
Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
- 8.8 High severity
SIMATIC RTLS Locating Manager: Download of Code Without Integrity Check
A vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA10) (All versions < V3.0.1.1), SIMATIC RTLS Locating Manager (6GT2780-0DA20) (All versions < V3.0.1.1), SI
- 7.5 High severity
luckyframeweb: Download of Code Without Integrity Check
LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.
- 8.8 High severity
Ignition: Download of Code Without Integrity Check
Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition. User interaction is required to exploit
- 9.6 Critical severity
IO-1020 Micro ELD: Download of Code Without Integrity Check
IO-1020 Micro ELD downloads source code or an executable from an adjacent location and executes the code without sufficiently verifying the origin or integrity of the code.
- 8.1 High severity
wp-crontrol: Download of Code Without Integrity Check
WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative users to create events in the WP-Cron system that store and execute PHP code subject to the restrictive security permissions documented here.
- 9.8 Critical severity
Apache Doris: Download of Code Without Integrity Check
Download of Code Without Integrity Check vulnerability in Apache Doris. The jdbc driver files used for JDBC catalog is not checked and may resulting in remote command execution. Once the attacker is authorized to create a JDBC catalog, he/she can use arbitrary
- 7.5 High severity
MULTIPROG: Download of Code Without Integrity Check
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to download and execute applications without integrity checks on the device which may result in a
- 7.5 High severity
Automation Worx Software Suite: Download of Code Without Integrity Check
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
Multiple data integrity vulnerabilities exist in the package hash checking functionality of Buildroot 2023.08.1 and Buildroot dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.This vulne
- 8.1 High severity
Buildroot: Download of Code Without Integrity Check
A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted man-in-the-middle attack can lead to arbitrary command execution in the builder.
- 9.8 Critical severity
TCO!stream: Download of Code Without Integrity Check
In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.
- 9.8 Critical severity
Gecko Bootloader: Buffer Copy without Checking Size of Input
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authenticat
- 9.8 Critical severity
Genian NAC V4.0: Download of Code Without Integrity Check
Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Malicious Software Update.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Ge
- 7.2 High severity
WP 6070-WVPS: Download of Code Without Integrity Check
In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to gain full access to the device.
- 7.8 High severity
FortiClientMac: Download of Code Without Integrity Check
A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions
- 7.5 High severity
Ruoyi: Download of Code Without Integrity Check
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server.
- 7.4 High severity
Wnr612v2 Firmware: Download of Code Without Integrity Check
An exploitable firmware modification vulnerability was discovered in certain Netgear products. The data integrity of the uploaded firmware image is ensured with a fixed checksum number. Therefore, an attacker can conduct a MITM attack to modify the user-upload
- 9.8 Critical severity
Inet 900 Firmware: Download of Code Without Integrity Check
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.
- 8.1 High severity
Wnr2000 Firmware: Download of Code Without Integrity Check
An exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbi
- 8.8 High severity
D-Link DNR-322L Download of Code Without Integrity Check Exploited
Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
- 8.8 High severity
sinatra: Download of Code Without Integrity Check
Sinatra is a domain-specific language for creating web applications in Ruby. An issue was discovered in Sinatra 2.0 before 2.2.3 and 3.0 before 3.0.4. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition head
- 8.8 High severity
Django: Download of Code Without Integrity Check
An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename is deri
- 8.1 High severity
Advanced Installer: Download of Code Without Integrity Check
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit t
- 8.8 High severity
Msi Package Builder: Download of Code Without Integrity Check
Certain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check. This affects MSI Package Builder for Windows 9.1.4 and Remote Installer for Windows 6.0.13 and Ping Monitor for Windows 8.0.18 and Remote Shutdown for Windows 7.
- 8.8 High severity
Zoom Client for Meetings for Windows: Download of Code Without Integrity Check
The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated at