VYPR

CWE-306

Missing Authentication for Critical Function

BaseDraftLikelihood: High

Description

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-12 · CAPEC-166 · CAPEC-216 · CAPEC-36 · CAPEC-62

CVEs mapped to this weakness (2,982)

page 86 of 150
  • CVE-2020-35756HigMay 3, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Password Information Leak. The luci_service daemon running on port 7777 does not require authentication to return the device configuration password in cleartext when…

  • CVE-2020-35755HigMay 3, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Information Leak. The luci_service deamon running on port 7777 provides a sub-category of commands for which Read_ is prepended. Commands in this category are…

  • CVE-2020-21997HigApr 29, 2021
    risk 0.49cvss 7.5epss 0.03

    Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control.

  • CVE-2020-21996HigApr 28, 2021
    risk 0.49cvss 7.5epss 0.04

    AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario.

  • CVE-2020-17517HigApr 27, 2021
    risk 0.49cvss 7.5epss 0.02

    The S3 buckets and keys in a secure Apache Ozone Cluster must be inaccessible to anonymous access by default. The current security vulnerability allows access to keys and buckets through a curl command or an unauthenticated HTTP request. This enables unauthorized access to…

  • CVE-2020-15078HigApr 26, 2021
    risk 0.49cvss 7.5epss 0.05

    OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

  • CVE-2021-20990HigApr 19, 2021
    risk 0.49cvss 7.5epss 0.03

    In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.

  • CVE-2021-22997HigMar 31, 2021
    risk 0.49cvss 7.5epss 0.01

    On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. Note: Software versions which have reached End of…

  • CVE-2021-22995HigMar 31, 2021
    risk 0.49cvss 7.5epss 0.01

    On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development (EoSD) are…

  • CVE-2021-28148HigMar 22, 2021
    risk 0.49cvss 7.5epss 0.04

    One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a…

  • CVE-2020-19419HigMar 10, 2021
    risk 0.49cvss 7.5epss 0.03

    Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 allows remote attackers to obtain sensitive device information from the administrator console without authentication.

  • CVE-2019-25020HigFeb 27, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.

  • CVE-2021-20662HigFeb 24, 2021
    risk 0.49cvss 7.5epss 0.02

    Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors.

  • CVE-2020-15834HigFeb 1, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface.

  • CVE-2020-13856HigFeb 1, 2021
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes.

  • CVE-2020-24580HigDec 22, 2020
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an attacker to assign a static IP address that was once used by a valid user.

  • CVE-2020-28946HigDec 8, 2020
    risk 0.49cvss 7.5epss 0.01

    An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network access to the device) to obtain the configuration file, including hashed credential data. Successful exploitation could allow access to hashed credential data…

  • CVE-2020-28937HigDec 3, 2020
    risk 0.49cvss 7.5epss 0.01

    OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information (PHI) stored in the application, via a direct request…

  • CVE-2020-3392HigNov 18, 2020
    risk 0.49cvss 7.5epss 0.02

    A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not properly authenticate API calls. An attacker…

  • CVE-2020-10291HigNov 6, 2020
    risk 0.49cvss 7.5epss 0.01

    Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes. Visual Components software requires a special license which can beobtained from a network license server. The network…