CWE-300 · Cryptography
Channel Accessible by Non-Endpoint
54CVEs
SortMost likely exploited
54 CVEs with CWE-300 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2009-3555The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier…Apache · Http Server · CVSS 9.8 · 2009-11-09 | 9.8 | 87% | 2009-11-09 |
| CVE-2017-12150It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker…Samba · samba · CVSS 7.4 · 2018-07-26 | 7.4 | 13% | 2018-07-26 |
| CVE-2017-12151A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the require…Samba · samba · CVSS 7.4 · 2018-07-27 | 7.4 | 4.1% | 2018-07-27 |
| CVE-2021-22890curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HT…Haxx · https://github.com/curl/curl · CVSS 4.3 · 2021-04-01 | 4.3 | 3.1% | 2021-04-01 |
| CVE-2021-32926When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and…Rockwellautomation · Micro800, MicroLogix 1400 · CVSS 5.9 · 2021-06-03 | 5.9 | 3.0% | 2021-06-03 |
| CVE-2017-7480rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.Red Hat, Inc. · rkhunter · 2017-07-21 | – | 2.4% | 2017-07-21 |
| CVE-2020-10749A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle…Red Hat · containernetworking/plugins · CVSS 6 · 2020-06-03 | 6.0 | 2.1% | 2020-06-03 |
| CVE-2017-15086It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.Red Hat, Inc. · Gluster Storage for RHEL 6 · 2017-11-08 | – | 1.7% | 2017-11-08 |
| CVE-2017-15085It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.Red Hat, Inc. · Gluster Storage for RHEL 6 · 2017-11-08 | – | 1.7% | 2017-11-08 |
| CVE-2017-12697A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker t…Gm · General Motors and Shanghai OnStar (SOS) iOS Client · 2018-01-09 | – | 1.4% | 2018-01-09 |
| CVE-2019-5456SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials…UniFi · UniFi · 2019-07-30 | – | 1.3% | 2019-07-30 |
| CVE-2021-22909A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerabil…Ui · EdgeMAX EdgeRouter · 2021-05-27 | – | 1.3% | 2021-05-27 |
| CVE-2018-14636Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is…The Openstack Project · openstack-neutron · CVSS 5.3 · 2018-09-10 | 5.3 | 1.2% | 2018-09-10 |
| CVE-2019-3981MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username a…MikroTik · WinBox · 2020-01-14 | – | 1.1% | 2020-01-14 |
| CVE-2017-12735A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other…Siemens · LOGO! 8 BM (incl. SIPLUS variants) · 2017-08-30 | – | 1.1% | 2017-08-30 |
| CVE-2021-41033In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HT…The Eclipse Foundation · Eclipse Equinox · 2021-09-13 | – | 1.1% | 2021-09-13 |
| CVE-2019-3793Invitations Service supports HTTP connectionsPivotal · Apps Manager · CVSS 8.1 · 2019-04-24 | 8.1 | 1.1% | 2019-04-24 |
| CVE-2021-21953An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle at…Anker · Anker · CVSS 7.7 · 2021-12-22 | 7.7 | 1.0% | 2021-12-22 |
| CVE-2023-31004IBM Security Access Manager Container gain accessIBM · Security Verify Access Appliance · CVSS 8.3 · 2024-02-03 | 8.3 | 1.0% | 2024-02-03 |
| CVE-2016-10536engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerabilit…HackerOne · engine.io-client node module · 2018-05-31 | – | 1.0% | 2018-05-31 |
| CVE-2017-9941A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated…Siemens · SiPass integrated All versions before V2.70 · 2017-08-08 | – | 0.9% | 2017-08-08 |
| CVE-2017-6870A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to…Siemens · SIMATIC WinCC Sm@rtClient for Android · 2017-08-08 | – | 0.9% | 2017-08-08 |
| CVE-2018-13298Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unsp…Synology · Android Moments · CVSS 4.2 · 2019-04-01 | 4.2 | 0.9% | 2019-04-01 |
| CVE-2023-7008Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesRed Hat · Red Hat Enterprise Linux 8 · CVSS 5.9 · 2023-12-23 | 5.9 | 0.8% | 2023-12-23 |
| CVE-2019-14899A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is u…Red Hat · VPN · CVSS 7.4 · 2019-12-11 | 7.4 | 0.8% | 2019-12-11 |
| CVE-2020-11024Man-in-the-middle attack in Moonlight iOS/tvOSmoonlight-stream · Moonlight · CVSS 6.1 · 2020-04-29 | 6.1 | 0.8% | 2020-04-29 |
| CVE-2017-6052A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endpoints are not verified, which may allow a remote attacker to…Hyundai · Hyundai Motor America Blue Link · 2017-04-26 | – | 0.6% | 2017-04-26 |
| CVE-2025-31214This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker in a privileged network position may be able to intercept…Apple · iOS and iPadOS · CVSS 8.1 · 2025-05-12 | 8.1 | 0.5% | 2025-05-12 |
| CVE-2024-32049BIG-IP Next Central Manager vulnerabilityF5 · BIG-IP Next Central Manager · CVSS 7.4 · 2024-05-08 | 7.4 | 0.5% | 2024-05-08 |
| CVE-2023-2310Channel Accessible by Non-EndpointSchweitzer Engineering Laboratories · SEL-3505 · CVSS 6.8 · 2023-05-10 | 6.8 | 0.5% | 2023-05-10 |
| CVE-2024-50568A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 thro…Fortinet · FortiOS · CVSS 5.6 · 2025-06-10 | 5.6 | 0.5% | 2025-06-10 |
| CVE-2023-32634An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-mi…SoftEther VPN · SoftEther VPN · CVSS 7.8 · 2023-10-12 | 7.8 | 0.4% | 2023-10-12 |
| CVE-2019-8282Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-…Gemalto · Sentinel LDK RTE · 2019-06-07 | – | 0.4% | 2019-06-07 |
| CVE-2024-50565A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7…Fortinet · FortiOS · CVSS 3 · 2025-04-08 | 3.0 | 0.4% | 2025-04-08 |
| CVE-2023-38272IBM Cloud Pak System information disclosureIBM · Cloud Pak System · CVSS 5.9 · 2025-03-27 | 5.9 | 0.4% | 2025-03-27 |
| CVE-2024-45407Sunshine has incorrect state management during pairing process may lead to incorrectly authorized clientLizardByte · Sunshine · CVSS 6.5 · 2024-09-10 | 6.5 | 0.3% | 2024-09-10 |
| CVE-2024-31206Use of Unencrypted HTTP Request in dectalk-ttsJstnMcBrd · dectalk-tts · CVSS 8.2 · 2024-04-04 | 8.2 | 0.3% | 2024-04-04 |
| CVE-2021-27768An SSL certificate host verification vulnerability affects HCL Verse for AndroidHCL Software · Verse for Android · CVSS 6.3 · 2022-05-12 | 6.3 | 0.3% | 2022-05-12 |
| CVE-2023-4885Multiple vulnerabilities in Open5GSOpen5GS · Open5GS · CVSS 6.5 · 2023-10-03 | 6.5 | 0.3% | 2023-10-03 |
| CVE-2024-36553Forever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.No vendor recorded · CVSS 8.1 · 2025-02-06 | 8.1 | 0.3% | 2025-02-06 |
| CVE-2025-63363A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows a…Waveshare · Rs232/485 To Wifi Eth (b) Firmware · CVSS 7.5 · 2025-12-04 | 7.5 | 0.3% | 2025-12-04 |
| CVE-2025-54792LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interceptionlocalsend · localsend · CVSS 9.3 · 2025-08-01 | 9.3 | 0.3% | 2025-08-01 |
| CVE-2025-29419CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.No vendor recorded · CVSS 7.1 · 2026-08-26 | 7.1 | 0.3% | 2026-08-26 |
| CVE-2019-19751easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes tri…No vendor recorded · CVSS 5.6 · 2024-04-30 | 5.6 | 0.3% | 2024-04-30 |
| CVE-2024-27263IBM Sterling B2B Integrator information disclosureIBM · Sterling B2B Integrator · CVSS 5.3 · 2025-01-28 | 5.3 | 0.3% | 2025-01-28 |
| CVE-2026-97866Zhonglun CloudPOS Automatic Update Program.cs channel accessibleZhonglun · CloudPOS · CVSS 5.6 · 2026-09-25 | 5.6 | 0.3% | 2026-09-25 |
| CVE-2026-76715Unauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)Hewlett Packard Enterprise (HPE) · ALE · CVSS 7.1 · 2026-09-22 | 7.1 | 0.3% | 2026-09-22 |
| CVE-2024-12602Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality.Huawei · HarmonyOS · CVSS 6.2 · 2025-02-06 | 6.2 | 0.2% | 2025-02-06 |
| CVE-2026-12991Multiple vulnerabilities in Ghost Robotics' Vision 60Ghost Robotics · Vision 60 · CVSS 8.7 · 2026-07-27 | 8.7 | 0.2% | 2026-07-27 |
| CVE-2026-23810Cross-BSSID GTK Re-encryption and Traffic InjectionHewlett Packard Enterprise (HPE) · HPE Aruba Networking Wireless Operating Systems (AOS-8 & AOS-10) · CVSS 4.3 · 2026-03-04 | 4.3 | 0.2% | 2026-03-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.