CWE-924 (通信信道中传输过程中消息完整性的不正确执行) — Vulnerability Class 22

CWE-924 represents a critical integrity weakness where software fails to verify that transmitted messages remain unaltered during network communication. This vulnerability typically arises when developers neglect to implement cryptographic checks, allowing attackers to intercept and modify data in transit. By exploiting this gap, adversaries can perform man-in-the-middle attacks, altering payloads to inject malicious commands or spoof legitimate endpoints without detection. Such tampering compromises the authenticity and reliability of the communication channel, potentially leading to severe data corruption or unauthorized access. To mitigate this risk, developers must enforce robust message integrity mechanisms, such as using digital signatures or hash-based message authentication codes (HMAC). Additionally, employing secure transport protocols like TLS ensures that data remains encrypted and verified, effectively preventing unauthorized modifications and ensuring that the received message matches the original sender’s intent.