CWE-642 · 18 records

External Control of Critical State Data

CVEs in this class

18 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2020-27872No exploit	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routnetgear · ac2100 firmware · CWE-642 Pre-auth Auth bypass	High8.8	—	0.9%	Feb 4, 2021
34Monitor	CVE-2018-15382No exploit	Cisco HyperFlex Software Static Signing Key Vulnerabilitycisco · hyperflex hx data platform · CWE-642 Pre-auth	High8.6	—	1.3%	Oct 5, 2018
32Monitor	CVE-2024-8754No exploit	External Control of Critical State Data in GitLabgitlab · gitlab · CWE-642	High8.1	—	0.4%	Sep 12, 2024
31Monitor	CVE-2019-9496No exploit	An invalid authentication sequence could result in the hostapd process terminating due to missing state validation stepsw1.fi · hostapd · CWE-642 Pre-auth Denial of service	High7.5	—	4.7%	Apr 17, 2019
28Monitor	CVE-2025-49090No exploit	The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.matrix · matrix specification · CWE-642	High7.1	—	0.5%	Oct 2, 2025
27Monitor	CVE-2020-26186No exploit	Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability.dell · inspiron 5675 firmware · CWE-642 RCE	Medium6.8	—	0.4%	Jan 8, 2021
27Monitor	CVE-2024-22387No exploit	External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticategallagher · controller 6000 and controller 7000 · CWE-642 Pre-auth	Medium6.8	—	0.3%	Jul 10, 2024
27Monitor	CVE-2022-22154No exploit	Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoSjuniper · junos · CWE-642	Medium6.8	—	0.2%	Jan 18, 2022
24Monitor	CVE-2017-0928No exploit	html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variabletheguardian · html-janitor · CWE-642 Pre-auth	Medium6.1	—	1.0%	Jun 4, 2018
22Monitor	CVE-2020-1976No exploit	GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.paloaltonetworks · globalprotect · CWE-642 Denial of service	Medium5.5	—	0.3%	Feb 12, 2020
21Monitor	CVE-2022-32859No exploit	A logic issue was addressed with improved state management.apple · iphone os · CWE-642 Pre-auth	Medium5.3	—	0.6%	Nov 1, 2022
21Monitor	CVE-2025-54566No exploit	hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.qemu · qemu · CWE-642 Pre-auth	Medium5.4	—	0.3%	Jul 24, 2025
18Monitor	CVE-2025-26787No exploit	An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.keyfactor · signserver · CWE-642	Medium4.7	—	0.1%	Dec 22, 2025
17Monitor	CVE-2024-58265No exploit	The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message deliverymcginty · snow · CWE-642 Denial of service	Medium4.3	—	0.4%	Jul 27, 2025
17Monitor	CVE-2026-65355No exploit	An information disclosure issue was addressed with improved state management.apple · ipados · CWE-642 Pre-auth	Medium4.3	—	0.3%	Sep 14, 2026
17Monitor	CVE-2026-84518No exploit	This issue was addressed through improved state management.apple · safari · CWE-642 Pre-auth	Medium4.3	—	0.3%	Sep 14, 2026
17Monitor	CVE-2026-65352No exploit	An information disclosure issue was addressed with improved state management.apple · ipados · CWE-642 Pre-auth	Medium4.3	—	0.3%	Sep 14, 2026
12Monitor	GHSA-97f8-h76h-f297No exploit	Duplicate Advisory: Unauthenticated Nonce Increment in snowcrates.io · snow · CWE-642 Denial of service	Low3.1	—	—	Jul 28, 2025

CVE-2020-27872
35Monitor
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 rout
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
netgear · ac2100 firmwareFeb 4, 2021
CVE-2018-15382
34Monitor
Cisco HyperFlex Software Static Signing Key Vulnerability
HighCVSS 8.6No exploitEPSS 1%
- Pre-auth
cisco · hyperflex hx data platformOct 5, 2018
CVE-2024-8754
32Monitor
External Control of Critical State Data in GitLab
HighCVSS 8.1No exploitEPSS 0%
gitlab · gitlabSep 12, 2024
CVE-2019-9496
31Monitor
An invalid authentication sequence could result in the hostapd process terminating due to missing state validation steps
HighCVSS 7.5No exploitEPSS 5%
- Pre-auth
- Denial of service
w1.fi · hostapdApr 17, 2019
CVE-2025-49090
28Monitor
The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.
HighCVSS 7.1No exploitEPSS 0%
matrix · matrix specificationOct 2, 2025
CVE-2020-26186
27Monitor
Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability.
MediumCVSS 6.8No exploitEPSS 0%
- RCE
dell · inspiron 5675 firmwareJan 8, 2021
CVE-2024-22387
27Monitor
External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticate
MediumCVSS 6.8No exploitEPSS 0%
- Pre-auth
gallagher · controller 6000 and controller 7000Jul 10, 2024
CVE-2022-22154
27Monitor
Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS
MediumCVSS 6.8No exploitEPSS 0%
juniper · junosJan 18, 2022
CVE-2017-0928
24Monitor
html-janitor node module suffers from an External Control of Critical State Data vulnerability via user-control of the '_sanitized' variable
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
theguardian · html-janitorJun 4, 2018
CVE-2020-1976
22Monitor
GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
paloaltonetworks · globalprotectFeb 12, 2020
CVE-2022-32859
21Monitor
A logic issue was addressed with improved state management.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
apple · iphone osNov 1, 2022
CVE-2025-54566
21Monitor
hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
qemu · qemuJul 24, 2025
CVE-2025-26787
18Monitor
An error in the SignServer container startup logic was found in Keyfactor SignServer versions prior to 7.2.
MediumCVSS 4.7No exploitEPSS 0%
keyfactor · signserverDec 22, 2025
CVE-2024-58265
17Monitor
The snow crate before 0.9.5 for Rust, when stateful TransportState is used, allows incrementing a nonce and thereby denying message delivery
MediumCVSS 4.3No exploitEPSS 0%
- Denial of service
mcginty · snowJul 27, 2025
CVE-2026-65355
17Monitor
An information disclosure issue was addressed with improved state management.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
apple · ipadosSep 14, 2026
CVE-2026-84518
17Monitor
This issue was addressed through improved state management.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
apple · safariSep 14, 2026
CVE-2026-65352
17Monitor
An information disclosure issue was addressed with improved state management.
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
apple · ipadosSep 14, 2026
GHSA-97f8-h76h-f297
12Monitor
Duplicate Advisory: Unauthenticated Nonce Increment in snow
LowCVSS 3.1No exploit
- Denial of service
crates.io · snowJul 28, 2025

All vulnerability classes