CWE-924 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Description

The software establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.

Latest vulnerabilities for CWE-924

Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Schneider Electric Pro-face GP-Pro EX and Remote HMI 2025-02-06
Medium Yes

Multiple vulnerabilities in Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert and Modicon M340, M580 and M580 Safety PLCs 2024-11-29
High Yes

Multiple vulnerabilities in Schneider Electric Modicon M340, MC80, and Momentum Unity M1E 2024-11-26
Medium No

Spoofing Vulnerability in Microsoft Windows DNS 2024-11-12
Medium Yes

Multiple vulnerabilities in SchedMD Slurm 2023-12-26
High Yes

Denial of service in Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software 2021-10-28
Medium Yes

Improper Enforcement of Message Integrity During Transmission in a Communication Channel in minio.io minio 2021-03-19
Medium Yes

Multiple vulnerabilities in Mattermost, Mattermost Server 2020-06-19
High Yes

Improper Enforcement of Message Integrity During Transmission in a Communication Channel in KUKA.Sim Pro 2020-04-08
Low Yes

References

Description of CWE-924 on Mitre website