CWE-419 · Access Control
Unprotected Primary Channel
8CVEs
SortMost likely exploited
8 CVEs with CWE-419 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-11248CheckDebug Endpoint pprof - Exposure DetectionKubernetes · Kubernetes · CVSS 6.5 · 2019-08-29 | 6.5 | 75% | 2019-08-29 |
| CVE-2018-12120Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens…The Node.js Project · Node.js · 2018-11-28 | – | 4.3% | 2018-11-28 |
| CVE-2023-30859Spigot Command Exploit in Tritontritonmc · Triton · CVSS 7.2 · 2023-05-01 | 7.2 | 1.1% | 2023-05-01 |
| CVE-2022-33932Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated networ…Dell · PowerScale OneFS · CVSS 5.3 · 2022-08-22 | 5.3 | 0.9% | 2022-08-22 |
| CVE-2018-12539In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach…The Eclipse Foundation · Eclipse OpenJ9 · 2018-08-14 | – | 0.5% | 2018-08-14 |
| CVE-2025-24030Envoy Admin Interface Exposed through prometheus metrics endpointenvoyproxy · gateway · CVSS 7.1 · 2025-01-23 | 7.1 | 0.4% | 2025-01-23 |
| CVE-2024-2414Unprotected Primary Channel vulnerability in Movistar 4G routerMovistar · Router Movistar 4G · CVSS 8.8 · 2024-03-13 | 8.8 | 0.3% | 2024-03-13 |
| CVE-2024-39886TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-m…DREAM TRAIN INTERNET INC. · TONE store App · CVSS 3.7 · 2024-07-10 | 3.7 | 0.3% | 2024-07-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.