Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924
The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.
We track 12 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.1.
Latest Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerabilities
- 8.3 High severity
arc: Missing Authentication for Critical Functionality
Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc Enterprise's cluster replication receiver at `internal/cluster/replication/receiver.go` validates only the wire-format envelope (length, opcode) of inbound messages. T
- 7.1 High severity
MELSEC MX Controller MX-R model MXR300-16: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX-R model, MELSEC MX Controller MX-F model, Master/local module, CC-Link IE TSN interface board, Motion module,
- 9.4 Critical severity
Home Kit Firmware: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 leaving the string vulnerable to intercept
- 8.8 High severity
SICK Lector8xx: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device.
- 7.1 High severity
Pro-face GP-Pro EX: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs man in the middle atta
- 7.5 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead to denial of service and loss of confidentiality and integrity of controllers. To
- 9.1 Critical severity
mirotalk_p2p: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.
- 9.0 Critical severity
RFC: Improper Validation of Integrity Check Value
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authent
- 8.1 High severity
Modicon M340 CPU (part numbers BMXP34*): Improper Enforcement of Message Integrity During Transmission in a Communication Channel
CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentiality, integrity of controllers when conducting a Man in the Middle attack.
- 7.5 High severity
Slurm: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. T
- 8.1 High severity
Chatbot: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.
- 7.5 High severity
MicroLogix 1100: Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Rockwell Automation was made aware that the webservers of the Micrologix 1100 and 1400 controllers contain a vulnerability that may lead to a denial-of-service condition. The security vulnerability could be exploited by an attacker with network access to the a