Weaknesses of type CWE-353

54 results

Ausência de verificação de integridade

A aplicação transmite ou armazena dados sem mecanismos que garantam que eles não foram alterados. Um atacante consegue modificar os dados em trânsito ou em repouso sem ser detectado, comprometendo a confiabilidade das informações processadas.

Example

Um serviço envia um arquivo de configuração pela rede sem hash ou assinatura digital. Um atacante intercepta o arquivo e muda parâmetros críticos; o servidor aplica a configuração modificada sem saber que foi adulterada.

How to mitigate

Implemente verificação de integridade usando HMAC, assinatura digital (RSA, ECDSA) ou hash criptográfico (SHA-256). Valide sempre a integridade antes de processar dados sensíveis, especialmente em APIs, arquivos de configuração e dados em repouso.

CVE-2026-95723HIGHAuthenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) ClientEPSS 0.1%CVE-2022-2793MEDIUMEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no aEPSS 0.1%CVE-2026-77157MEDIUMast-cli: Auto-update downloads are not verified against a checksum before executionEPSS 0.1%CVE-2026-17583HIGHThermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity CheckEPSS 0.1%CVE-2026-42428HIGHOpenClaw < 2026.4.8 - Missing Integrity Verification in Package DownloadsEPSS 0.1%CVE-2025-65203HIGHKeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directivEPSS 0.1%CVE-2025-32890MEDIUMAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. It uses a custom implementation of encryption without anEPSS 0.1%CVE-2025-48500HIGHBIG-IP APM VPN web client for macOS vulnerabilityEPSS 0.1%CVE-2026-81049MEDIUMDell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker withEPSS 0.1%CVE-2026-7574HIGHAnthropic Claude Desktop Cowork VM Image Contents Not Validated Before UseEPSS 0.1%CVE-2026-45787MEDIUMelecterm's encrypt method not safe enoughEPSS 0.1%CVE-2025-32882MEDIUMAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The app uses a custom implementation of encryption withoutEPSS 0.1%CVE-2024-43108MEDIUMgoTenna Pro ATAK Plugin Missing Support for Integrity CheckEPSS 0.1%CVE-2024-47123MEDIUMMissing Support for Integrity Check in goTenna ProEPSS 0.1%