Vulnerabilities > Insufficient Verification of Data Authenticity

DATE CVE VULNERABILITY TITLE RISK
2022-08-19 CVE-2022-2793 Insufficient Verification of Data Authenticity vulnerability in Emerson Electric'S Proficy
Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no authentication or authorization of data packets after establishing a connection for the SRTP protocol.
local
low complexity
emerson CWE-345
7.8
2022-08-17 CVE-2022-30262 Insufficient Verification of Data Authenticity vulnerability in Emerson products
The Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity.
local
low complexity
emerson CWE-345
7.8
2022-08-16 CVE-2020-1755 Insufficient Verification of Data Authenticity vulnerability in Moodle
In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks.
network
low complexity
moodle CWE-345
5.3
2022-08-16 CVE-2022-30264 Insufficient Verification of Data Authenticity vulnerability in Emerson products
The Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem operations.
network
low complexity
emerson CWE-345
critical
9.8
2022-08-10 CVE-2022-37008 Insufficient Verification of Data Authenticity vulnerability in Huawei Emui, Harmonyos and Magic UI
The recovery module has a vulnerability of bypassing the verification of an update package before use.
network
low complexity
huawei CWE-345
7.5
2022-07-28 CVE-2022-30315 Insufficient Verification of Data Authenticity vulnerability in Honeywell Safety Manager Firmware
Honeywell Experion PKS Safety Manager (SM and FSC) through 2022-05-06 has Insufficient Verification of Data Authenticity.
network
low complexity
honeywell CWE-345
critical
9.8
2022-07-26 CVE-2022-30269 Insufficient Verification of Data Authenticity vulnerability in Motorola Ace1000 Firmware
Motorola ACE1000 RTUs through 2022-05-02 mishandle application integrity.
network
low complexity
motorola CWE-345
8.8
2022-07-26 CVE-2022-30272 Insufficient Verification of Data Authenticity vulnerability in Motorola Ace1000 Firmware
The Motorola ACE1000 RTU through 2022-05-02 mishandles firmware integrity.
network
low complexity
motorola CWE-345
7.2
2022-07-26 CVE-2022-29958 Insufficient Verification of Data Authenticity vulnerability in Jtekt products
JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity.
network
low complexity
jtekt CWE-345
critical
9.8
2022-07-14 CVE-2022-28370 Insufficient Verification of Data Authenticity vulnerability in Verizon Lvskihp Outdoorunit Firmware 3.33.101.0
On Verizon 5G Home LVSKIHP OutDoorUnit (ODU) 3.33.101.0 devices, the RPC endpoint crtc_fw_upgrade provides a means of provisioning a firmware update for the device.
network
low complexity
verizon CWE-345
7.5