Fallos del tipo CWE-494

210 resultados

Escalação de privilégio

Fraqueza que permite a um atacante ou processo não-autorizado obter permissões superiores àquelas inicialmente concedidas. A aplicação falha em validar ou restringir adequadamente quem pode executar operações sensíveis, permitindo que um usuário comum acesse funcionalidades administrativas ou recursos protegidos.

Ejemplo

Um aplicativo web que não verifica se o usuário logado é realmente um administrador antes de processar requisições para deletar contas ou alterar configurações do sistema. Um atacante autenticado como usuário comum pode forjar uma requisição para /admin/delete-user e conseguir sucesso porque o servidor não valida o nível de privilégio.

Cómo mitigar

Implemente validação rigorosa de autorização em toda operação sensível (não confie apenas em ocultação de interfaces). Use controle de acesso baseado em papéis (RBAC) ou atributos (ABAC), verifique permissões no servidor a cada requisição, e mantenha logs de acessos privilegiados para auditoria.

CVE-2020-22654CRITICALIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, RuckusEPSS 0.4%CVE-2025-57431HIGHThe Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update EPSS 0.3%CVE-2026-82021CRITICALHermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch ReferenceEPSS 0.3%CVE-2023-27025HIGHAn arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrarEPSS 0.3%CVE-2023-46143HIGHPhoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLCEPSS 0.3%CVE-2023-5592HIGHPhoenix Contact: ProConOs prone to Download of Code Without Integrity CheckEPSS 0.3%CVE-2026-28500HIGHONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain AttackEPSS 0.3%CVE-2025-63434HIGHThe update mechanism in Xtooltech Xtool AnyScan Android Application 4.40.40 and prior is insecure. The application downloads and extracts upEPSS 0.3%CVE-2026-59286HIGHSpring for GraphQL loads Untrusted Resources in GraphiQL supportEPSS 0.3%CVE-2022-38199MEDIUMBUG-000144172 - Remote file download issue in ArcGIS ServerEPSS 0.3%CVE-2022-4261MEDIUMRapid7 Nexpose Update Validation IssueEPSS 0.3%CVE-2023-45799HIGHMLSoft TCO!stream Remote Code Execution VulnerabilityEPSS 0.3%CVE-2023-37220HIGHSynel Terminals - CWE-494: Download of Code Without Integrity CheckEPSS 0.3%CVE-2026-65097HIGHNVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without intEPSS 0.3%CVE-2026-9089HIGHThe ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operatioEPSS 0.3%CVE-2026-33075CRITICALFastGPT has Arbitrary Code Execution in GitHub Actions via pull_request_target in fastgpt-preview-image.ymlEPSS 0.3%CVE-2023-46144MEDIUMPHOENIX CONTACT: PLCnext Control prone to download of code without integrity checkEPSS 0.3%CVE-2024-30206HIGHA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All versions < V3.0.1.1), SIMATIC RTLS Locating ManageEPSS 0.3%CVE-2023-5984HIGH A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorizeEPSS 0.3%CVE-2025-7620HIGHDSIC｜Cross-browser Components for Official Document Creation - Remote Code ExecutionEPSS 0.3%