CWE-419 Unprotected Primary Channel
baseThe product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (15)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-11248US | high8.2OT high | — | ||
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpo… | ||||
| CVE-2023-30859US | critical9.8 | — | ||
Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit… | ||||
| CVE-2018-12120US | high8.1 | — | ||
Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens… | ||||
| CVE-2018-12539US | high7.8 | — | ||
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach A… | ||||
| CVE-2021-22003US | high7.5 | — | ||
VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumer… | ||||
| CVE-2023-6533US | medium6.5 | — | ||
Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the end device has left the network. After this, frames sent by… | ||||
| CVE-2022-3027US | medium5.7 | — | ||
The CMS8000 device does not properly control or sanitize the SSID name of a new Wi-Fi access point. A threat actor could create an SSID with a malicious name, including non-standar… | ||||
| CVE-2022-33932US | medium5.3 | — | ||
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated network… | ||||
| CVE-2025-31964US | medium4.9 | — | ||
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of admi… | ||||
| CVE-2026-53322US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
vfio/pci: Clean up DMABUFs before disabling function
On device shutdown, make vfio_pci_core_close_device() cal… | ||||
| CVE-2025-24030US | — | — | ||
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes cluster can use a pat… | ||||
| CVE-2024-50588US | —OT elevated | — | ||
An unauthenticated attacker with access to the local network of the
medical office can use known default credentials to gain remote DBA
access to the Elefant Firebird database. T… | ||||
| CVE-2024-39886US | — | — | ||
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-mi… | ||||
| CVE-2024-3051US | — | — | ||
Malformed Device Reset Locally command classes can be sent to temporarily deny service to an end device. Any frames sent by the end device will not be acknowledged by the gateway d… | ||||
| CVE-2024-2414US | — | — | ||
The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820. This device has the 'adb' service open on port 5555 and provides access to a sh… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan