Weaknesses of type CWE-1327

21 results

Vinculação a endereço IP irrestrito

Ocorre quando uma aplicação se vincula a 0.0.0.0 ou :: (IPv6) sem restrição, expondo serviços internos ou de administração a qualquer interface de rede, incluindo a internet. Um atacante na rede consegue acessar portas que deveriam ser privadas apenas porque a aplicação aceitou conexões de qualquer origem.

Example

Um serviço de banco de dados ou painel administrativo que escuta em 0.0.0.0:5432 fica acessível de fora da rede corporativa. Um atacante externo consegue se conectar diretamente, contornando firewalls internos que protegem apenas a rede local.

How to mitigate

Vincule serviços apenas a 127.0.0.1 (localhost) ou a IPs específicos da rede interna. Use firewalls/grupos de segurança para restringir acesso, e documente qual é o escopo de rede legítimo para cada serviço durante o design.

CVE-2024-47176MEDIUMcups-browsed binds to `INADDR_ANY:631`, trusting any packet from any sourceEPSS 50.2%CVE-2023-1968CRITICALCVE-2023-1968EPSS 1.8%CVE-2025-3621CRITICALRemote Code Execution in ProTNS ActADUREPSS 0.8%CVE-2024-36105MEDIUMdbt allows Binding to an Unrestricted IP Address via socketsocketEPSS 0.7%CVE-2025-61934CRITICALAutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327EPSS 0.6%CVE-2026-24015CRITICALApache IoTDB: Insecure Default Configuration VulnerabilityEPSS 0.6%CVE-2026-21528MEDIUMAzure IoT Explorer Information Disclosure VulnerabilityEPSS 0.5%CVE-2023-5398MEDIUMServer receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. See Honeywell SecurityEPSS 0.4%CVE-2023-41742MEDIUMExcessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, WinEPSS 0.4%CVE-2025-11538MEDIUMKeycloak-server: debug default bind addressEPSS 0.4%CVE-2026-28395MEDIUMOpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrlEPSS 0.4%CVE-2022-29820LOWIn JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possibleEPSS 0.4%CVE-2025-55322HIGHOmniParser Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-0481CRITICALUnrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized chEPSS 0.3%CVE-2026-16503CRITICALVPS.org one-click Supabase template deployment instance contains multiple vulnerabilitiesEPSS 0.2%CVE-2026-55641HIGH9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFEPSS 0.2%CVE-2026-42503HIGHAccidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/goplsEPSS 0.2%CVE-2024-49384LOWExcessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: AcroniEPSS 0.2%CVE-2024-49383LOWExcessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: AcronisEPSS 0.2%CVE-2024-49382LOWExcessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: AcroniEPSS 0.2%