Falhas do tipo CWE-693

836 resultados

Falha em Mecanismo de Proteção

CWE-693 descreve quando um mecanismo de segurança implementado no software não funciona como deveria, seja por design deficiente, implementação incorreta ou bypass não intencional. O resultado é que uma ou mais camadas de defesa falham, deixando o sistema exposto a ataques que deveriam ter sido bloqueados.

Exemplo

Um sistema implementa validação de entrada apenas no cliente (JavaScript), mas deixa a API backend sem validação equivalente. Um atacante contorna a proteção do cliente e envia dados maliciosos diretamente para o servidor, que as aceita sem filtro. O mecanismo de proteção falhou porque estava incompleto.

Como mitigar

Implementar controles de segurança em profundidade (nunca confiar apenas em uma camada), validar e sanitizar dados em todos os pontos de entrada, testar regularmente se as proteções estão funcionando conforme esperado, e documentar claramente qual é a intenção de cada controle de segurança.

CVE-2021-35556MEDIUMVulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are afEPSS 8.5%CVE-2017-10952—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interactioEPSS 7.2%CVE-2017-3197—GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protectionEPSS 5.6%CVE-2022-32845CRITICALThis issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app mayEPSS 5.4%CVE-2021-32835—Groovy Sandbox escape in Eclipse KetiEPSS 4.6%CVE-2020-10887HIGHThis vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. AuthenticatiEPSS 4.2%CVE-2022-42821MEDIUMA logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An aEPSS 3.9%CVE-2022-21283MEDIUMVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions EPSS 3.8%CVE-2021-27245HIGHThis vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(USEPSS 3.2%CVE-2018-0383—A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file EPSS 3.0%CVE-2022-35978HIGHLua sandbox escape from mod in MinetestEPSS 2.9%CVE-2018-14281—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interactioEPSS 2.8%CVE-2018-14280—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interactioEPSS 2.8%CVE-2024-38226HIGHMicrosoft Publisher Security Feature Bypass VulnerabilityEPSS 2.7%KEVCVE-2018-0384—A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-bEPSS 2.5%CVE-2023-38157MEDIUMMicrosoft Edge (Chromium-based) Security Feature Bypass VulnerabilityEPSS 2.5%CVE-2021-32960HIGHRockwell Automation FactoryTalk Services Platform Protection Mechanism FailureEPSS 2.4%CVE-2025-21276HIGHWindows MapUrlToZone Denial of Service VulnerabilityEPSS 2.4%CVE-2022-31479CRITICALRemote Code Execution via command injection of the hostnameEPSS 2.4%CVE-2020-3299MEDIUMMultiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass VulnerabilityEPSS 2.3%