CWE-291: Reliance on IP Address for Authentication
The product uses an IP address for authentication.
A kind of CWE-290 Authentication Bypass by Spoofing.
From the CWE List. © The MITRE Corporation.
Newest
- sonicwall sonicos A session validation vulnerability has been identified in the SonicOS management interface, which... 8.8 High
- jetbrains youtrack In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket... 3.5 Low
- tenda ac8, ac8 firmware +1 more Tenda AC8 IPv6 check_is_ipv6 ip address for authentication 9.3 Critical
- openclaw OpenClaw Canvas Authentication Bypass Vulnerability 7.4 High
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 more A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The... 6.9 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Insufficient Session Management in dormakaba access manager 7.7 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 more Vasion Print (formerly PrinterLogic) Insecure Access to Docker Instances WAN 8.7 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 more The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in... 9.0 Critical
- qnap qts, quts hero +1 more QTS, QuTS hero 4.2 Medium
-
symfony/symfonyPackagist Symfony2 improper IP based access control 5.9 Medium - asus router, uniwayinfo uw-101x firmware, uw-301vpw firmware +3 more +5 more Uniway Router Administrative Web Interface reliance on ip address for authentication 5.6 Medium
- ibm aspera faspex IBM Aspera Faspex security bypass 5.3 Medium
- dji spark firmware DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to connect to the devi… 9.1 Critical