← Back

CVE-2025-23178

nvd nist
Published: Apr 29, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.6
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Exploitability: 2.8 / Impact: 4.7
Source: CNA (Secondary)

Description

CWE-923: Improper Restriction of Communication Channel to Intended Endpoints

Related CWEs

CWE-923
Improper Restriction of Communication Channel to Intended Endpoints
The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (1)

Source: cna@cyber.gov.il

Timeline

No history available yet.