CWE-1327: Binding to an Unrestricted IP Address
CWE版本: 4.18
更新日期: 2025-09-09
弱点描述
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.
常见后果
影响范围: Availability
技术影响: DoS: Amplification
潜在缓解措施
阶段: System Configuration
描述: Assign IP addresses that are not 0.0.0.0.
有效性: High
阶段: System Configuration
策略: Firewall
描述: Unwanted connections to the configured server may be denied through a firewall or other packet filtering measures.
有效性: High
观察示例
参考: CVE-2022-21947
Desktop manager for Kubernetes and container management binds a service to 0.0.0.0, allowing users on the network to make requests to a dashboard API.
引入模式
| 阶段 | 说明 |
|---|---|
| System Configuration | - |