Base weakness
Incomplete
The product establishes a communication channel with an endpoint and receives a message from that endpoint, but it does not sufficiently ensure that the message was not modified during transmission.
Last updated
Attackers might be able to modify the message and spoof the endpoint by interfering with the data as it crosses the network or by redirecting the connection to a system under their control.
34 recorded CVEs are caused by CWE-924 (Improper Enforcement of Message Integrity During Transmission in a Communication Channel). The highest-severity and most recent are shown first. 7 new CWE-924 CVEs have been recorded so far in 2026 (3 in 2025).
Dräger Infinity M540 VG4.1.1 Spoofing and DoS via Network Message Handling
SICK Lector8xx and InspectorP8xx vulnerable for code execution
Channel Accessible by Non-Endpoint in CBOT's Chatbot
DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability
Showing 12 of 34 recorded CWE-924 CVEs. Get an alert for each new one, with AI-written analysis and fixes.
Monitor CWE-924 vulnerabilitiesWhat can happen when CWE-924 is exploited.
Gain Privileges or Assume Identity
Affects: Integrity, Confidentiality
If an attackers can spoof the endpoint, the attacker gains all the privileges that were intended for the original endpoint.
Typically introduced during these phases of the software lifecycle.
Common questions about CWE-924.
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.
Get an alert when a new CWE-924 CVE affects your products, with AI-written analysis and remediation steps.