Skip to content
OpenAdvisories

Weakness (CWE)

CWE-353: Missing Support for Integrity Check

Base Draft

The product uses a transmission protocol that does not include a mechanism for verifying the integrity of the data during transmission, such as a checksum.

More detail

The end-to-end philosophy of checks states that integrity checks should be performed at the lowest level that they can be completely implemented. Excluding further sanity checks and input validation performed by applications, the protocol's checksum is the most important level of checksum, since it can be performed more completely than at any previous level and takes into account entire messages, as opposed to single packets.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Add an appropriately sized checksum to the protocol, ensuring that data received may be simply validated before it is parsed and used.

  2. Implementation

    Ensure that the checksums present in the protocol design are properly implemented and added to each message before it is sent.

Source: MITRE CWE-353

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-17583 Public exploit

    Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

    The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes.

    Thermo Fisher Applied Biosystems GeneMapper ID-X Software ABI PRISM 3100/3100-Avant Data Collection Software Applied Biosystems 3730/3730xL Series Data Collection Software Ubuntu
  • High 8.7
    CVE-2026-7574 Public exploit

    Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

    Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a version marker string before booting rootfs.img, but does not verify image conte…

    Anthropic Claude Desktop Cowork
  • Low 2.0
    CVE-2026-21437 Public exploit

    eopkg vulnerable to package file list integrity bypass

    eopkg is a Solus package manager implemented in python3. In versions prior to 4.4.0, a malicious package could include files that are not tracked by `eopkg`. This requires the installation of a package from a malicious or compromised source. Files in such pac…

    getsolus eopkg