CWE-419Unprotected Primary Channel

Abstraction: Base · CVEs in our corpus: 12

The product uses a primary channel for administration or restricted functionality, but it does not properly protect the channel.

Last updated: 14 October 2026 20:41 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: full · 3 mapping(s) from 2 framework(s): STIG oracle linux 8 2 (full) · STIG oracle linux 9 1 (mostly)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A06:2025 Insecure Design.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

RA-6 Technical Surveillance Countermeasures Survey
PR.AA-03
PR.AA-05
PR.DS-02

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

4 hardening rules · 2 OS baselines

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls PROPOSED for this weakness (1)AI-assisted

These are model PROPOSALS, not graded mappings. They come from controls_to_cwe_proposals, which carries no grade field at all; across the CWE pages 1,540 of 1,722 such associations (89%) have never been graded by anything. The heading said “address” until 2026-09-29, which asserted a relationship the data does not carry. Graded cross-walks are on the framework map, not here.

Control	Title	Family	Why it addresses this CWE
`RA-6`	Technical Surveillance Countermeasures Survey	RA	TSCM employment uncovers unprotected primary channels that have been physically or technically compromised for surveillance.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2019-11248`	8.8	8.2	0.7506	2019-08-29
`CVE-2024-50588`	7.4	9.8	0.0070	2024-11-08
`CVE-2018-12120`	6.7	8.1	0.0428	2018-11-28
`CVE-2024-2414`	6.4	8.8	0.0028	2024-03-13
`CVE-2018-12539`	5.9	7.8	0.0049	2018-08-14
`CVE-2024-3051`	5.9	7.5	0.0048	2024-04-26
`CVE-2023-30859`	5.6	7.2	0.0107	2023-05-01
`CVE-2025-24030`	5.5	7.1	0.0042	2025-01-23
`CVE-2023-6533`	5.0	6.5	0.0025	2024-02-21
`CVE-2022-33932`	4.6	5.3	0.0085	2022-08-22
`CVE-2024-39886`	3.2	3.7	0.0026	2024-07-10
`CVE-2025-31964`	2.2	2.2	0.0035	2026-01-07