Falhas do tipo CWE-1327

21 resultados

Associação a Endereço IP Irrestrito

É quando uma aplicação faz bind (associa um socket ou serviço) a 0.0.0.0 ou :: (IPv6) sem restrição, expondo a porta em todas as interfaces de rede. Isso permite que qualquer máquina na rede ou internet acesse o serviço, quando muitas vezes ele deveria estar acessível apenas localmente ou em uma rede específica.

Exemplo

Um servidor de depuração ou administração (como uma porta de Telnet ou interface REST interna) que faz bind em 0.0.0.0:9000 fica acessível de qualquer lugar. Um atacante na internet descobre a porta, conecta e controla o sistema sem autenticação adicional.

Como mitigar

Faça bind em localhost (127.0.0.1) ou em IPs específicos de confiança em vez de 0.0.0.0. Se realmente precisar de acesso remoto, use firewall ou ACLs (listas de controle de acesso) para restringir quem pode conectar, e implemente autenticação forte no serviço.

CVE-2024-47176MEDIUMcups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceEPSS 50.2%CVE-2023-1968CRITICALCVE-2023-1968EPSS 1.8%CVE-2025-3621CRITICALRemote Code Execution in ProTNS ActADUREPSS 0.8%CVE-2024-36105MEDIUMdbt allows Binding to an Unrestricted IP Address via socketsocketEPSS 0.7%CVE-2025-61934CRITICALAutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327EPSS 0.6%CVE-2026-24015CRITICALApache IoTDB: Insecure Default Configuration VulnerabilityEPSS 0.6%CVE-2026-21528MEDIUMAzure IoT Explorer Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-5398MEDIUMServer receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell SecurityEPSS 0.4%CVE-2023-41742MEDIUMExcessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, WinEPSS 0.4%CVE-2025-11538MEDIUMKeycloak-server: debug default bind addressEPSS 0.4%CVE-2026-28395MEDIUMOpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlEPSS 0.4%CVE-2022-29820LOWIn JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possibleEPSS 0.4%CVE-2025-55322HIGHOmniParser Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-0481CRITICALUnrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized chEPSS 0.3%CVE-2026-16503CRITICALVPS.org one-click Supabase template deployment instance contains multiple vulnerabilitiesEPSS 0.2%CVE-2026-55641HIGH9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFEPSS 0.2%CVE-2026-42503HIGHAccidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/goplsEPSS 0.2%CVE-2024-49384LOWExcessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: AcroniEPSS 0.2%CVE-2024-49383LOWExcessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: AcronisEPSS 0.2%CVE-2024-49382LOWExcessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: AcroniEPSS 0.2%