Falhas do tipo CWE-757

31 resultados

Degradação de algoritmo para versão menos segura durante negociação

Ocorre quando um sistema, durante a negociação de protocolo (TLS, SSH, etc.), aceita deliberadamente usar um algoritmo criptográfico mais fraco do que o disponível. O atacante força a conexão a recair para versões antigas ou cifras quebradas, mesmo que ambos os lados suportem algo melhor. É perigoso porque abre brecha para ataques conhecidos contra os algoritmos degradados.

Exemplo

Um servidor TLS que negocia com cliente suporta TLS 1.3 com ChaCha20, mas aceita downgrade para TLS 1.0 com DES quando o cliente (ou atacante MITM) simula suporte apenas à versão antiga. A conexão cai para um protocolo vulnerável a ataques de força bruta.

Como mitigar

Configure o servidor para rejeitar negociações com algoritmos fracos ou versões desatualizadas (desabilite SSLv3, TLS 1.0/1.1, cifras RC4, DES). Use configurações de segurança mínima que não permitem downgrade: lista explícita de algoritmos e versões aceitos, sem fallback para legado.

CVE-2020-10135MEDIUMBluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacksEPSS 2.4%CVE-2017-9269HIGHlack of keypinning in libzypp could lead to repository switchingEPSS 2.3%CVE-2021-36326MEDIUMDell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticaEPSS 1.2%CVE-2025-24154CRITICALAn out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, maEPSS 1.2%CVE-2019-14887HIGHA flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't hoEPSS 1.1%CVE-2017-9267MEDIUMeDirectory LDAP peer certificate validation issueEPSS 1.0%CVE-2024-4995CRITICALProtocol Downgrade in Wapro ERP DesktopEPSS 0.9%CVE-2023-2974MEDIUMQuarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolEPSS 0.9%CVE-2019-16791MEDIUMdowngrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolverEPSS 0.8%CVE-2020-16200MEDIUMPhilips Clinical Collaboration Platform Algorithm DowngradeEPSS 0.6%CVE-2018-25029—The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radioEPSS 0.6%CVE-2024-20069MEDIUMIn modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead EPSS 0.6%CVE-2024-23656HIGHDex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphersEPSS 0.4%CVE-2026-2673MEDIUMOpenSSL TLS 1.3 server may choose unexpected key agreement groupEPSS 0.4%CVE-2024-8773HIGHProtocol Downgrade in SIMPLE.ERPEPSS 0.4%CVE-2024-38883CRITICALAn issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker tEPSS 0.4%CVE-2025-10693HIGHSilicon Labs Z-Wave PIR Sensor Joins Network as Non-SecureEPSS 0.3%CVE-2022-33160LOWIBM Security Directory Suite information disclosureEPSS 0.3%CVE-2026-4942MEDIUMIBM i is Affected by Algorithm Downgrade in Transport Layer Security []EPSS 0.3%CVE-2026-55953CRITICALTLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationEPSS 0.2%