Falhas do tipo CWE-1327

27 resultados

Associação a Endereço IP Irrestrito

É quando uma aplicação faz bind (associa um socket ou serviço) a 0.0.0.0 ou :: (IPv6) sem restrição, expondo a porta em todas as interfaces de rede. Isso permite que qualquer máquina na rede ou internet acesse o serviço, quando muitas vezes ele deveria estar acessível apenas localmente ou em uma rede específica.

Exemplo

Um servidor de depuração ou administração (como uma porta de Telnet ou interface REST interna) que faz bind em 0.0.0.0:9000 fica acessível de qualquer lugar. Um atacante na internet descobre a porta, conecta e controla o sistema sem autenticação adicional.

Como mitigar

Faça bind em localhost (127.0.0.1) ou em IPs específicos de confiança em vez de 0.0.0.0. Se realmente precisar de acesso remoto, use firewall ou ACLs (listas de controle de acesso) para restringir quem pode conectar, e implemente autenticação forte no serviço.

CVE-2024-47176MEDIUMcups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceEPSS 50.6%CVE-2023-1968CRITICALCVE-2023-1968EPSS 1.8%CVE-2026-82456CRITICALargocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTPEPSS 1.4%CVE-2025-3621CRITICALRemote Code Execution in ProTNS ActADUREPSS 0.8%CVE-2024-36105MEDIUMdbt allows Binding to an Unrestricted IP Address via socketsocketEPSS 0.7%CVE-2025-61934CRITICALAutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327EPSS 0.6%CVE-2026-24015CRITICALApache IoTDB: Insecure Default Configuration VulnerabilityEPSS 0.6%CVE-2026-21528MEDIUMAzure IoT Explorer Information Disclosure VulnerabilityEPSS 0.5%CVE-2026-20212CRITICALCisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution VulnerabilityEPSS 0.5%CVE-2023-41742MEDIUMExcessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, WinEPSS 0.5%CVE-2026-57123CRITICALPraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired inEPSS 0.5%CVE-2023-5398MEDIUMServer receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell SecurityEPSS 0.4%CVE-2026-75021HIGHfastify-cli vulnerable to remote code execution via ignored explicit Inspector bind addressEPSS 0.4%CVE-2026-28395MEDIUMOpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlEPSS 0.4%CVE-2025-11538MEDIUMKeycloak-server: debug default bind addressEPSS 0.4%CVE-2022-29820LOWIn JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possibleEPSS 0.4%CVE-2025-55322HIGHOmniParser Remote Code Execution VulnerabilityEPSS 0.4%CVE-2026-55641HIGH9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFEPSS 0.3%CVE-2026-16503CRITICALVPS.org one-click Supabase template deployment instance contains multiple vulnerabilitiesEPSS 0.3%CVE-2026-0481CRITICALUnrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized chEPSS 0.3%