Skip to content
OpenAdvisories

Weakness (CWE)

CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Base Incomplete

The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.

Source: MITRE CWE-924

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.3
    CVE-2026-68554

    Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requests

    Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an on-path attacker can append attributes after MESSAGE-INTEGRITY to an authenticated STUN request on plain UDP or TCP, adjust the STUN header length, and recompute the unke…

    coturn coturn coturn coturn Debian Ubuntu
  • Low 3.5
    CVE-2023-30565

    CQI Data Sniffing

    An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.

    Becton Dickinson & Co CQI Reporter