Cyber Posture

CWE · MITRE source

CWE-420Unprotected Alternate Channel

Abstraction: Base · CVEs in our corpus: 37

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Last updated: 19 May 2026 14:18 UTC

NIST 800-53 r5 controls that address this weakness (3)AI

Control Title Family Why it addresses this CWE
AC-17Remote AccessACUsage restrictions and authorization for remote access protect against unprotected alternate channels.
RA-6Technical Surveillance Countermeasures SurveyRATSCM surveys detect and neutralize unprotected alternate channels introduced by surveillance equipment or modifications.
SC-41Port and I/O Device AccessSCRemoves or disables unprotected alternate I/O channels that could otherwise be used to bypass primary controls.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-20198 KEV9.610.00.94012023-10-16
CVE-2025-54309 KEV8.89.00.82842025-07-18
CVE-2025-133157.19.80.84992025-11-19
CVE-2024-100816.410.00.73912024-11-06
CVE-2020-85582.35.40.20152020-07-27
CVE-2025-529212.09.90.00502025-06-23
CVE-2023-45701.88.80.00112023-10-05
CVE-2025-10951.88.80.00042025-04-08
CVE-2025-543511.88.90.00072025-08-03
CVE-2025-85571.88.80.00032025-09-11
CVE-2025-620011.88.80.00022025-12-18
CVE-2026-40217 UPD1.88.80.00282026-04-10
CVE-2023-312411.78.60.00012023-05-22
CVE-2024-80381.67.90.00082024-10-02
CVE-2025-539671.68.00.00012025-10-08
CVE-2025-673031.67.50.01322026-01-05
CVE-2025-417271.67.80.00012026-01-27
CVE-2023-288401.57.50.00652023-04-04
CVE-2023-72661.57.50.00072024-12-28
CVE-2025-590331.57.40.00052025-09-08
CVE-2023-288421.46.80.00862023-04-04
CVE-2023-527181.36.40.00032024-12-28
CVE-2026-435051.36.50.00062026-05-01
CVE-2024-44441.15.30.00932024-05-14
CVE-2024-60991.15.30.00092024-07-02