Cyber Posture

CWE · MITRE source

CWE-420Unprotected Alternate Channel

Abstraction: Base · CVEs in our corpus: 36

The product protects a primary channel, but it does not use the same level of protection for an alternate channel.

Last updated: 09 May 2026 03:25 UTC

NIST 800-53 r5 controls that address this weakness (3)AI

Control Title Family Why it addresses this CWE
AC-17Remote AccessACUsage restrictions and authorization for remote access protect against unprotected alternate channels.
RA-6Technical Surveillance Countermeasures SurveyRATSCM surveys detect and neutralize unprotected alternate channels introduced by surveillance equipment or modifications.
SC-41Port and I/O Device AccessSCRemoves or disables unprotected alternate I/O channels that could otherwise be used to bypass primary controls.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2023-20198 KEV9.610.00.93982023-10-16
CVE-2025-54309 KEV8.59.00.77762025-07-18
CVE-2025-133156.99.80.82882025-11-19
CVE-2024-100816.410.00.73912024-11-06
CVE-2020-85582.35.40.20152020-07-27
CVE-2025-529212.09.90.00502025-06-23
CVE-2023-45701.88.80.00112023-10-05
CVE-2025-10951.88.80.00042025-04-08
CVE-2025-543511.88.90.00072025-08-03
CVE-2025-85571.88.80.00032025-09-11
CVE-2025-620011.88.80.00032025-12-18
CVE-2026-402171.88.80.00242026-04-10
CVE-2023-312411.78.60.00012023-05-22
CVE-2024-80381.67.90.00082024-10-02
CVE-2025-539671.68.00.00012025-10-08
CVE-2025-673031.67.50.01322026-01-05
CVE-2025-417271.67.80.00012026-01-27
CVE-2023-288401.57.50.00652023-04-04
CVE-2023-72661.57.50.00072024-12-28
CVE-2025-590331.57.40.00052025-09-08
CVE-2023-288421.46.80.00862023-04-04
CVE-2023-527181.36.40.00022024-12-28
CVE-2026-435051.36.50.00062026-05-01
CVE-2024-44441.15.30.00932024-05-14
CVE-2024-60991.15.30.00092024-07-02