CWE-406 Insufficient Control of Network Message Volume (Network Amplification)
classThe product does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the product to transmit more traffic than should be allowed for that actor.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
Schwachstellen (36)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-29552US | high7.5OT kritisch | KEV | ||
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to… | ||||
| CVE-2022-0028US | high8.6OT kritisch | KEV | ||
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would ap… | ||||
| CVE-2013-5211US | medium5.0 | Exploit | ||
The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (… | ||||
| CVE-2021-38135US | critical9.8 | — | ||
Possible
External Service Interaction attack
in iManager has been discovered in
OpenText™ iManager 3.2.6.0000. | ||||
| CVE-2021-38425US | critical9.1 | — | ||
eProsima Fast DDS versions prior to 2.4.0 (#2269) are susceptible to exploitation when an attacker sends a specially crafted packet to flood a target device with unwanted traffic,… | ||||
| CVE-2021-38487US | critical9.1 | — | ||
RTI Connext Professional versions 4.1 to 6.1.0, and Connext Micro versions 2.4 and later are vulnerable when an attacker sends a specially crafted packet to flood target devices wi… | ||||
| CVE-2021-38429US | critical9.1 | — | ||
OCI OpenDDS versions prior to 3.18.1 are vulnerable when an attacker sends a specially crafted packet to flood target devices with unwanted traffic, which may result in a denial-of… | ||||
| CVE-2016-10142US | high8.6 | — | ||
An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6 implementations from all vend… | ||||
| CVE-2021-43547US | high8.2 | — | ||
TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to flood target devices with unwanted traffi… | ||||
| CVE-2023-46298US | high7.5 | — | ||
Next.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requestin… | ||||
| CVE-2022-27491US | high7.5OT erhöht | — | ||
A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001 throug… | ||||
| CVE-2021-4234US | high7.5 | — | ||
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not res… | ||||
| CVE-2021-37110US | high7.5 | — | ||
There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality. | ||||
| CVE-2020-29540US | high7.5 | — | ||
API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Server as a Denial-of-Service proxy by sendi… | ||||
| CVE-2020-10772US | high7.5 | — | ||
An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an… | ||||
| CVE-2018-3833US | high7.5OT erhöht | — | ||
An exploitable firmware downgrade vulnerability exists in Insteon Hub running firmware version 1013. The firmware upgrade functionality, triggered via PubNub, retrieves signed firm… | ||||
| CVE-2007-1532US | medium6.4OT erhöht | — | ||
The neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to conduct a redirect attack by (1) responding to queries by sending spoofed Neighbor Adver… | ||||
| CVE-1999-1254US | medium5.0 | — | ||
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables. | ||||
| CVE-2020-2100US | medium5.8 | — | ||
Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848. | ||||
| CVE-2023-30671US | medium5.5 | — | ||
Logic error in package installation via adb command prior to SMR Jul-2023 Release 1 allows local attackers to downgrade installed application. | ||||
03
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan