CVE-2026-40434

High

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same…

icscert·CWE-940·Published 2026-04-17

CVSS

8.1

EPSS

0.00

KEV

Exploits

cve.orgen

188 chars

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.

NVDen

188 chars

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.

Anviz CrossChex Standard carece de verificación de origen en el canal cliente/servidor, lo que permite la inyección de paquetes TCP por un atacante en la misma red para alterar o interrumpir el tráfico de la aplicación.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.1	—	—	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
3.1	Secondary	NVD	8.1	2.8	5.2	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H