CWE-300

Channel Accessible by Non-Endpoint

Parent: CWE-923 - Improper Restriction of Communication Channel to Intended Endpoints

The product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.

53 vulnerabilities with CWE-300
CVE-2026-23812 MEDIUM
Access Point - Auth Bypass
CVSS 4.3
CVE-2026-23811 MEDIUM
Client Isolation Mechanism - Auth Bypass
CVSS 4.3
CVE-2026-23810 MEDIUM
Wi-Fi AP - Traffic Injection
CVSS 4.3
CVE-2025-63363 HIGH
Waveshare RS232/485 TO WIFI ETH - DoS
CVSS 7.5
CVE-2025-40770 HIGH
SINEC Traffic Analyzer - Man-in-the-Middle
CVSS 7.4
CVE-2025-54792 MEDIUM
LocalSend <1.16.1 - SSRF
CVSS 6.8
CVE-2024-50568 MEDIUM
Fortinet FortiOS <7.4.3, <7.2.7 & <7.0.14 - SSRF
CVSS 5.9
CVE-2025-31214 HIGH
Apple Ipados < 18.5 - Denial of Service
CVSS 8.1
CVE-2025-20122 HIGH
Cisco Catalyst SD-WAN Manager - Privilege Escalation
CVSS 7.8
CVE-2024-50565 LOW
Fortinet FortiOS <7.4.3 - SSRF
CVSS 3.1
CVE-2023-38272 MEDIUM
IBM Cloud Pak System <2.3.4.1 - Info Disclosure
CVSS 5.9
CVE-2024-36553 HIGH
Forever KidsWatch Call Me KW-50 - MITM
CVSS 8.1
CVE-2024-12602 MEDIUM
ParamWatcher - Info Disclosure
CVSS 6.2
CVE-2024-27263 MEDIUM
IBM Sterling B2B Integrator <6.2.0.1 - Info Disclosure
CVSS 5.3
CVE-2024-45407 MEDIUM
Sunshine - SSRF
CVSS 6.5
CVE-2024-32049 HIGH
BIG-IP Next CM - Info Disclosure
CVSS 7.4
CVE-2019-19751 MEDIUM
easyMINE <2019-12-05 - Info Disclosure
CVSS 5.6
CVE-2024-31206 HIGH
dectalk-tts <1.0.1 - Info Disclosure
CVSS 8.2
CVE-2023-31004 HIGH
IBM Security Verify Access - Privilege Escalation
CVSS 8.3
CVE-2023-7008 MEDIUM
systemd-resolved - Info Disclosure
CVSS 5.9
CVE-2023-32634 HIGH
Softether VPN - Authentication Bypass
CVSS 7.8
CVE-2023-4885 MEDIUM
Man in the Middle - Info Disclosure
CVSS 6.5
CVE-2023-2310 MEDIUM
SEL Real-Time Automation Controller - Man-in-the-Middle
CVSS 6.8
CVE-2021-27768 MEDIUM
Android App - Info Disclosure
CVSS 6.3
CVE-2022-22156 MEDIUM
Juniper Networks Junos OS - Privilege Escalation
CVSS 6.5
Details
Vulnerabilities 53
Links
MITRE CWE Entry Search this CWE With Exploits