TYPE DE FAIBLESSE

CWE-300

25 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-300 (en anglais) →

CVE-2026-23812Les points d'accès réseau sont affectés par une faille d'usurpation (spoofing) qui permet à un client connecté, filaire ou sans fil, de se faire passer pour la passerelle réseau. U… 4.3 MOYENNE

CVE-2026-23811Les équipements réseau utilisant l'isolation des clients sont affectés par une faille qui permet aux attaquants de contourner les restrictions destinées à empêcher les clients conn… 4.3 MOYENNE

CVE-2026-23810Les points d'accès sans fil sont affectés par une faille dans leur manière de traiter certaines trames Wi-Fi. Un attaquant se trouvant à portée du signal peut envoyer une trame spé… 4.3 MOYENNE

CVE-2024-50568A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throu… 5.9 MOYENNE

CVE-2023-38272IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, and 2.3.4.1 could allow a user with… 5.9 MOYENNE

CVE-2024-12602Identity verification vulnerability in the ParamWatcher module Impact: Successful exploitation of this vulnerability may affect service confidentiality. 6.2 MOYENNE

CVE-2024-27263IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obtain sensitive information from the dashboard UI using man in… 5.3 MOYENNE

CVE-2024-45407Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client ra… 6.5 MOYENNE

CVE-2019-19751easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes triv… 5.6 MOYENNE

CVE-2023-7008A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-th… 5.9 MOYENNE

CVE-2023-4885Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information. 6.5 MOYENNE

CVE-2023-2310A Channel Accessible by Non-Endpoint vulnerability in the Schweitzer Engineering Laboratories SEL Real-Time Automation Controller (RTAC) could allow a remote attacker to perform a … 6.8 MOYENNE

CVE-2021-27768Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted. In this s… 6.3 MOYENNE

CVE-2022-22156An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from … 6.5 MOYENNE

CVE-2021-31386A Protection Mechanism Failure vulnerability in the J-Web HTTP service of Juniper Networks Junos OS allows a remote unauthenticated attacker to perform Person-in-the-Middle (PitM) … 5.3 MOYENNE

CVE-2020-10749A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle … 6.0 MOYENNE

CVE-2020-11024In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack. The bug has been fixed in Moonlight v4.0.1 for iOS and tvOS. 6.1 MOYENNE

CVE-2019-0054An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform… 6.8 MOYENNE

CVE-2019-8282Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-t… 5.3 MOYENNE

CVE-2018-13298Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspe… 4.2 MOYENNE

CVE-2018-14636Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is s… 5.3 MOYENNE

CVE-2018-0025When an SRX Series device is configured to use HTTP/HTTPS pass-through authentication services, a client sending authentication credentials in the initial HTTP/HTTPS session is at … 6.1 MOYENNE

CVE-2016-10536engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability… 5.9 MOYENNE

CVE-2017-12697A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to… 5.9 MOYENNE

CVE-2017-15085It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6. 5.9 MOYENNE