CWE-294: Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- honeywell notifier web server (nws) version 3.50 and earlier, notifier webserver +1 moreIn Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s...9.1 Critical
- honda hr-v 2017 firmwareThe remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open...6.5 Medium
- yubico yubikey one time password validation serverThe sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an...8.6 High
- veraxsystems network management systemVerax NMS prior to 2.10 allows authentication via the encrypted password without knowing the...5.9 Medium
- omron plc cj firmware, plc cs firmware +1 moreIn Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could...8.1 High
- anviz management systemAnviz access control devices are vulnerable to replay attacks which could allow attackers to...7.5 High
- honeywell h2w2gr1 firmware, h2w2pc1m firmware, h2w2per3 firmware +61 more +63 moreHoneywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in...9.8 Critical
- fujitsu lx390 firmwareAn issue was discovered on Fujitsu Wireless Keyboard Set LX390 GK381 devices. Because of the lack...6.6 Medium
- keyidentity linotpLinOTP replay vulnerability with auto resynchronization enabled for TOTP token8.1 High
- tzumi klic lock, klic smart padlock model 5686 firmware +1 moreAn authentication bypass in website post requests in the Tzumi Electronics Klic Lock application...3.7 Low
- gemalto ezio ds3 serverGemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.5.7 Medium
- huawei p30,p30 pro, p30 firmware, p30 pro firmware +2 moreSome Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and...4.2 Medium
- verizon fios quantum gateway (g1100), fios quantum gateway g1100 firmware +1 moreAuthentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100)...7.5 High
- ysoft safeq server clientYSoft SafeQ Server 6 allows a replay attack.8.1 High
- chuango a11 pstn\/lcd\/rfid touch alarm system firmware, a8 pstn alarm system firmware, awv plus wifi alarm system firmware +8 more +10 moreThe Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control,...9.1 Critical
- hetronic nova-m, bms-hl firmware, dc mobile firmware +3 more +5 moreHetronic Nova-M prior to verson r161 uses fixed codes that are reproducible by sniffing and re...8.8 High
- zte zxr10 8905e, zxr10 8905e firmware +1 moreAll versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence...5.6 Medium
- gain electronic co. ltd saga1-l8b, sagaradio saga1-l8b firmware +1 moreSAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command...9.1 Critical
- telecrane f25 series, f25-10d firmware, f25-10s firmware +9 more +11 moreAll versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are...8.1 High
- descor infocad fmAn issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service...7.5 High
- neatorobotics botvac d4 connected firmware, botvac d6 connected firmware, botvac d7 connected firmware +2 moreA replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode...7.5 High
- o.bike obike-stationless bike sharing, smart locker firmware +1 moreoBike relies on Hangzhou Luoping Smart Locker to lock bicycles, which allows attackers to bypass...5.3 Medium
- schneider electric se modicon m221, all references, all versions prior to firmware v1.6.2.0, schneider-electric modicon m221 firmware +1 moreAn Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product...9.8 Critical
- medtronic mmt – 511 pump paradigm, mmt – 512 / mmt – 712 paradigm x12, mmt – 515 / mmt – 715 paradigm x15 +16 more +18 moreMedtronic MiniMed MMT-500/MMT-503 Remote Controllers Authentication Bypass by Capture-replay5.3 Medium
- ceph, debian linux, opensuse leap +7 more +9 moreIt was found that cephx authentication protocol did not verify ceph clients correctly and was...7.5 High
- insteon hub firmwareIn version 1012 and prior of Insteon's Insteon Hub, the radio transmissions used for...8.1 High
- d-link dir-130, dir-130 firmware, dir-330 +1 more +3 moreD-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to...9.8 Critical
- microsoft lync, skype for business +1 moreSkype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to...8.8 High
- schneider electric modicon modbus protocol, schneider-electric modbus firmware +1 moreSchneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay9.8 Critical
- fiyo cmsFiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level...8.8 High
- microsoft exchange server, windows 2000 +1 moreSMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange...7.5 High