CWE-294: Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- h project hAn issue in H v1.0 allows attackers to bypass authentication via a session replay attack.9.8 Critical
- siemens sicam t, 7kg8500-0aa00-0aa0 firmware, 7kg8500-0aa00-2aa0 firmware +34 more +36 moreA vulnerability has been identified in SICAM P850 (All versions < V3.00), SICAM P850 (All...7.5 High
- drtrustusa icheck connect bp monitor bp testing 118 firmwareDr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to...7.5 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreAuthentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series...8.1 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreUse of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric...8.1 High
- saltstack saltSaltStack Salt Authentication Bypass by Capture-replay8.8 High
- honda civic 2018 firmwareThe remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door...5.3 Medium
- apache spark, oracle financial services crime and compliance management studio +1 moreApache Spark Key Negotiation Vulnerability7.5 High
- schneider electric smartconnect, schneider-electric scl series 1029 ups firmware, scl series 1030 ups firmware +6 more +8 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an...9.8 Critical
- honeywell hbw2per1 firmware, hdzp252di firmware +1 moreHoneywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for...7.5 High
- laravel fortifyMulti-Factor Authentication issue in Laravel Fortify8.1 High
- giteaCapture-replay in Gitea9.8 Critical
- pmmp pocketmine-mpPocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay5.3 Medium
- honda civic 2012The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is...5.3 Medium
- securitashome alarm system firmwareAn RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2...6.8 Medium
- fortinet forticlient enterprise management server, forticlientems +1 moreAn authentication bypass by capture-replay vulnerability [CWE-294] in FortiClient EMS versions 7...5.4 Medium
- auvesy versiondogAUVESY Versiondog8.1 High
- meross msg100 firmwareMeross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g...8.1 High
- google android, samsung mobile devices +1 moreA lack of replay attack protection in GUTI REALLOCATION COMMAND message process in Qualcomm modem...4.4 Medium
- johnson controls kt-1, johnsoncontrols kantech kt-1 door controller firmware +1 moreKT-1 Capture-replay8.6 High
- dm fingertool project fingertoolDM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on…7.1 High
- php-fusionAn issue exists in PHP-Fusion 9.03.50 where session cookies are not deleted once a user logs out,...5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows NTLM Elevation of Privilege Vulnerability7.5 High
- nightowlsp smart doorbell firmwareIncorrect access control in push notification service in Night Owl Smart Doorbell FW version...6.5 Medium
- remotemouse emote remote mouseAn issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur...8.1 High
- netop vision proImproper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an...5.9 Medium
- hpe web viewpointIdelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay...5.9 Medium
- chainsafe ethermintAuthentication bypass by capture-replay in github.com/cosmos/ethermint7.5 High
- chainsafe ethermintAuthentication bypass by capture-replay in github.com/cosmos/ethermint7.5 High
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, the communication protocol...5.7 Medium
- tangro business workflowEvery login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows...4.2 Medium
- google androidAn issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos...9.8 Critical
- keycloakA flaw was found in Keycloak before 13.0.0 where an external identity provider, after successful...4.9 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- ceph, fedoraproject fedora, redhat ceph storage +1 more +3 moreA flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2...8.8 High
- trustedfirmware op-tee, westerndigital inand cl em132 firmware, inand ix em132 firmware +1 more +3 moreWestern Digital iNAND devices through 2020-06-03 allow Authentication Bypass via a capture-replay...6.8 Medium
- intel trusted execution engineAuthentication bypass by capture-replay in RPMB protocol message authentication subsystem in...6.8 Medium
- juuko k-800 firmwareJUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable...9.8 Critical
- juuko k-808 firmwareIn JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command,...9.8 Critical
- netwrix account lockout examinerNetwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2...7.5 High
- veritas aptareVeritas APTARE versions prior to 10.5 included code that bypassed the normal login process when...8.1 High
- exposure notifications project notifications** DISPUTED ** An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications)...5.9 Medium
- sierrawireless aleosALEOS ACEView Message Replay3.3 Low
- embedthis goaheadGoAhead before 5.1.2 mishandles the nonce value during Digest authentication. This may permit...8.8 High
- siemens sicam t, siemens ag sicam mmu, sicam sgu +3 more +5 moreA vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions)...8.8 High
- bareosAuthentication bypass in Bareos6.8 Medium
- tinxy smart wifi door lock firmwareTinxy Door Lock with firmware before 3.2 allow attackers to unlock a door by replaying an Unlock...5.9 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone does not check signature TTL of the EC2 credential auth method5.4 Medium
- ory hydraDisallow replay of `private_key_jwt` by blacklisting JTIs in Hydra5.8 Medium
- simplesamlphp saml2Missing Token Replay Detection8.2 High
- Show moreLoading…