Skip to content
OpenAdvisories

Weakness (CWE)

CWE-420: Unprotected Alternate Channel

Base Draft

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Identify all alternate channels and use the same protection mechanisms that are used for the primary channels.

Source: MITRE CWE-420

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-13315 Public exploit Scanner template EPSS 31%

    Unauthenticated log access in Twonky Server

    Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.

    Lynxtechnology Twonky Server
  • Critical 9.0
    CVE-2025-54309 Exploited Public exploit EPSS 93%

    CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation an…

    CrushFTP CrushFTP
    KEV Jul 22, 2025
  • Critical 10.0
    CVE-2023-20198 Exploited Public exploit Scanner template EPSS 100%

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 16, 2023