CWE-924 · Cryptography
Improper Enforcement of Message Integrity During Transmission in a Communication Channel
35CVEs
SortMost likely exploited
35 CVEs with CWE-924 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-14526An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption…W1.fi · Wpa Supplicant · 2018-08-08 | – | 1.5% | 2018-08-08 |
| CVE-2021-21390MITM modification of request bodies in MinIOminio · minio · CVSS 6.5 · 2021-03-19 | 6.5 | 0.9% | 2021-03-19 |
| CVE-2022-3166MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition AttackRockwell Automation · MicroLogix 1100 · CVSS 7.5 · 2022-12-16 | 7.5 | 0.7% | 2022-12-16 |
| CVE-2024-43450Windows DNS Spoofing VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.5 · 2024-11-12 | 7.5 | 0.6% | 2024-11-12 |
| CVE-2021-34793Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2021-10-27 | 8.6 | 0.6% | 2021-10-27 |
| CVE-2021-3716A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_…Nbdkit Project · nbdkit · 2022-03-02 | – | 0.6% | 2022-03-02 |
| CVE-2020-5869In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.F5 · BIG-IQ · 2020-04-24 | – | 0.5% | 2020-04-24 |
| CVE-2019-20844An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.Mattermost · Mattermost Server · 2020-06-19 | – | 0.4% | 2020-06-19 |
| CVE-2024-44730Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.No vendor recorded · CVSS 9.1 · 2024-10-11 | 9.1 | 0.4% | 2024-10-11 |
| CVE-2021-41034The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerabl…The Eclipse Foundation · Eclipse Che · 2021-09-29 | – | 0.4% | 2021-09-29 |
| CVE-2018-7295ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel…Square-Enix · Final Fantasy Xiv · 2018-05-23 | – | 0.4% | 2018-05-23 |
| CVE-2023-49933An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This all…Schedmd · Slurm · 2023-12-14 | – | 0.4% | 2023-12-14 |
| CVE-2025-0592SICK Lector8xx and InspectorP8xx vulnerable for code executionSICK AG · SICK Lector8xx · CVSS 8.8 · 2025-02-14 | 8.8 | 0.4% | 2025-02-14 |
| CVE-2020-10635ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication ChannelKUKA · Sim Pro · CVSS 4.3 · 2022-02-24 | 4.3 | 0.3% | 2022-02-24 |
| CVE-2023-6408CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentia…Schneider Electric · Modicon M340 CPU (part numbers BMXP34*) · CVSS 8.1 · 2024-02-14 | 8.1 | 0.3% | 2024-02-14 |
| CVE-2024-8933CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead…Schneider Electric · Modicon M340 CPU (part numbers BMXP34*) · CVSS 7.5 · 2024-11-13 | 7.5 | 0.3% | 2024-11-13 |
| CVE-2025-29628A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, a…Gardyn · Home Kit Firmware · CVSS 9.4 · 2025-07-25 | 9.4 | 0.3% | 2025-07-25 |
| CVE-2023-2885Channel Accessible by Non-Endpoint in CBOT's ChatbotCBOT · Chatbot · CVSS 8.1 · 2023-05-25 | 8.1 | 0.3% | 2023-05-25 |
| CVE-2023-43297An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.Linecorp · Line · 2023-10-02 | – | 0.2% | 2023-10-02 |
| CVE-2026-12576DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerabilitydeltaww · DVP80ES3 · CVSS 7.5 · 2026-07-01 | 7.5 | 0.2% | 2026-07-01 |
| CVE-2023-22372BIG-IP Edge Client for Windows and Mac OS vulnerabilityF5 · BIG-IP Edge Client · CVSS 5.9 · 2023-05-03 | 5.9 | 0.2% | 2023-05-03 |
| CVE-2015-2968LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a res…LINE Corporation · LINE@ for Android · 2023-10-31 | – | 0.2% | 2023-10-31 |
| CVE-2015-0897LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS co…LINE Corporation · LINE for Android · 2023-10-31 | – | 0.2% | 2023-10-31 |
| CVE-2023-26979Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to decrease or increase t…Bluetens · Bluetensq · 2023-08-03 | – | 0.2% | 2023-08-03 |
| CVE-2026-13584Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocolMitsubishi Electric Corporation · MELSEC MX Controller MX-R model MXR300-16 · CVSS 7.1 · 2026-07-30 | 7.1 | 0.2% | 2026-07-30 |
| CVE-2026-68554Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requestscoturn · coturn · CVSS 2.3 · 2026-08-19 | 2.3 | 0.2% | 2026-08-19 |
| CVE-2024-39229An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/A1300/X300B v4.5.16, XE300 v4.3.16, E750 v4.3.1…Gl-Inet · Mt6000 Firmware · CVSS 6.5 · 2024-08-06 | 6.5 | 0.2% | 2024-08-06 |
| CVE-2024-12399CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause partial loss of confidentiality, loss of in…Schneider Electric · Pro-face GP-Pro EX · CVSS 7.1 · 2025-01-17 | 7.1 | 0.2% | 2025-01-17 |
| CVE-2026-85104Brain stimulation parameters can be modified via Bluetooth in SoomaSooma · Sooma tDCS Home Therapy · CVSS 5.3 · 2026-09-16 | 5.3 | 0.2% | 2026-09-16 |
| CVE-2023-30565CQI Data SniffingBecton Dickinson & Co · CQI Reporter · CVSS 3.5 · 2023-07-13 | 3.5 | 0.1% | 2023-07-13 |
| CVE-2026-54891Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in sslErlang · OTP · CVSS 6.3 · 2026-07-02 | 6.3 | 0.1% | 2026-07-02 |
| CVE-2019-25719Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message HandlingDräger · Infinity Acute Care System · CVSS 8.6 · 2026-06-02 | 8.6 | 0.1% | 2026-06-02 |
| CVE-2020-11639Insufficient access control on Inter process communication,ABB · Advant MOD 300 AdvaBuild · CVSS 7.8 · 2024-07-23 | 7.8 | 0.1% | 2024-07-23 |
| CVE-2024-52288RMAC revert to the beginning of the session in libosdpgoToMain · libosdp · CVSS 5.1 · 2024-11-11 | 5.1 | 0.1% | 2024-11-11 |
| CVE-2026-14681PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSLPostgresql · PostgreSQL · CVSS 4.2 · 2026-08-13 | 4.2 | 0.1% | 2026-08-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.