Fallos del tipo CWE-300

61 resultados

Ataque de intermediário (Man-in-the-Middle)

É a capacidade de um atacante interceptar, ler ou modificar a comunicação entre dois pontos (cliente-servidor, sistema-sistema) sem que nenhum dos dois saiba. Acontece quando não há autenticação mútua, criptografia ou validação adequada do canal. O risco é crítico: vazamento de dados sensíveis, injeção de comandos maliciosos ou desvio de tráfego.

Ejemplo

Um aplicativo mobile se conecta a uma API via HTTP (não HTTPS) ou não valida o certificado SSL/TLS. Um atacante na mesma rede Wi-Fi consegue interceptar requisições, roubar tokens de autenticação ou injetar respostas falsas que o app acredita ser legítimas.

Cómo mitigar

Use HTTPS/TLS obrigatoriamente com validação rigorosa de certificados (pinning em apps críticos). Implemente autenticação mútua entre os pontos de comunicação e valide sempre a origem e integridade dos dados. Em redes não confiáveis, use VPN ou túneis cifrados.

CVE-2024-45407MEDIUMSunshine has incorrect state management during pairing process may lead to incorrectly authorized clientEPSS 0.3%CVE-2026-84197CRITICALIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oEPSS 0.3%CVE-2024-31206HIGHUse of Unencrypted HTTP Request in dectalk-ttsEPSS 0.3%CVE-2021-27768MEDIUMAn SSL certificate host verification vulnerability affects HCL Verse for AndroidEPSS 0.3%CVE-2023-4885MEDIUMMultiple vulnerabilities in Open5GSEPSS 0.3%CVE-2024-36553HIGHForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h is vulnerable to MITM attack.EPSS 0.3%CVE-2025-63363HIGHA lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1:EPSS 0.3%CVE-2025-29419HIGHCTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.EPSS 0.3%CVE-2025-54792CRITICALLocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File InterceptionEPSS 0.3%CVE-2019-19751MEDIUMeasyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes idenEPSS 0.3%CVE-2024-27263MEDIUMIBM Sterling B2B Integrator information disclosureEPSS 0.3%CVE-2026-97866MEDIUMZhonglun CloudPOS Automatic Update Program.cs channel accessibleEPSS 0.3%CVE-2026-76715HIGHUnauthenticated Man-in-the-Middle Attach Leads to Remote Code Execution Vulnerability in HPE Networking Analytics and Location Engine (ALE)EPSS 0.3%CVE-2024-12602MEDIUMIdentity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confEPSS 0.2%CVE-2026-12991HIGHMultiple vulnerabilities in Ghost Robotics' Vision 60EPSS 0.2%CVE-2026-23810MEDIUMCross-BSSID GTK Re-encryption and Traffic InjectionEPSS 0.2%CVE-2026-116789HIGHFreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serverEPSS 0.2%CVE-2026-23811MEDIUMUnauthorized Bi-Directional Traffic Interception via L2/L3 ManipulationEPSS 0.2%CVE-2026-23812MEDIUMSecurity Boundary Bypass via Routing Node ImpersonationEPSS 0.2%CVE-2025-20122HIGHCisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityEPSS 0.2%