CWE-294: Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- mitsubishi electric corporation melsec-f series fx3g-14mr/ds, melsec-f series fx3g-14mr/es, melsec-f series fx3g-14mr/es-a +297 more +299 moreAuthentication Bypass Vulnerability in MELSEC-F Series main module7.5 High
- wafucn wafu keyless smart lock firmwareAn issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via...6.5 Medium
- subnet powersystem centerSUBNET PowerSYSTEM Center Authentication Bypass by Capture-replay6.1 Medium
- gl-inet gl-ar750s firmwareGL.iNET GL-AR750S-Ext firmware v3.215 inserts the admin authentication token into a GET request...5.9 Medium
- agshome smart alarm project smart alarm firmwareWeak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access...7.5 High
- mydigoo dg-hamb firmwareWeak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows...7.5 High
- blitzwolf bw-is22 firmwareWeak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows...7.5 High
- keruistore kerui w18 firmwareWeak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full...7.5 High
- nissan sylphy classic 2021 firmwareThe remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door...6.5 Medium
- iofinnet tss-libIO FinNet tss-lib vulnerable to replay attacks involving proofs6.8 Medium
- apache linkisApache Linkis gateway module token authentication bypass9.1 Critical
- cisco duo, duo authentication for windows logon and rdp +1 moreCisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreAuthentication Bypass by Capture-replay in thorsten/phpmyfaq7.3 High
- answer, answerdev answerdev/answer +1 moreAuthentication Bypass by Capture-replay in answerdev/answer5.3 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Elevation of Privilege Vulnerability9.8 Critical
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +37 more +39 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause...8.1 High
- sinilink xy-wft1 firmwareThe Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass...5.9 Medium
- sap netweaver abap server and abap platform, netweaver application server abap, netweaver application server abap kernel +2 more +4 moreCapture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform9.0 Critical
- openatom openharmonyplatform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".6.5 Medium
- openatom openharmonysoftbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".6.5 Medium
- renault zoe e-tech firmwareThe remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same...8.1 High
- bluetooth core specificationBluetooth® Pairing in Bluetooth Core Specification v1.0B through v5.3 may permit an...7.5 High
- bluetooth core specificationBluetooth® Low Energy Pairing in Bluetooth Core Specification v4.0 through v5.3 may permit an...7.5 High
- electronic shelf label protocol project shelf label protocolThe ESL (Electronic Shelf Label) protocol, as implemented by (for example) the OV80e934802 RF...6.5 Medium
- xiongmaitech xm-jpr2-lx firmwareXiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to account takeover.7.5 High
- huawei emui, harmonyos +1 moreThe DDMP/ODMF module has a service hijacking vulnerability. Successful exploit of this...7.5 High
- mendix saml, siemens mendix saml (mendix 7 compatible), mendix saml (mendix 8 compatible) +2 more +4 moreA vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions <...9.8 Critical
- bluetooth core specificationAn information leakage vulnerability in the Bluetooth Low Energy advertisement scan response in...4.3 Medium
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreAn information disclosure vulnerability exists in the XFINDER functionality of Abode Systems, Inc...4.7 Medium
- tp-link ax10 firmwareTP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously...8.1 High
- octopus serverIn affected versions of Octopus Server it is possible to use the Git Connectivity test function...8.1 High
- django-mfa2 project django-mfa2django-mfa2 vulnerable to MFA Replay attack7.5 High
- huawei ws7200-10 firmwareThere is a traffic hijacking vulnerability in WS7200-10 11.0.2.13. Successful exploitation of...4.3 Medium
- wavlink wn531g3, wn531g3 firmware +1 moreWAVLINK Quantum D4G (WN531G3) Pass-The-Hash7.5 High
- mendix saml, siemens mendix saml (mendix 7 compatible), mendix saml (mendix 8 compatible) +2 more +4 moreA vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions <...9.8 Critical
- kubevelaVelaUX APIServer vulnerable to Authentication Bypass by Capture-replay8.2 High
- hyundai firmwareThe Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles...6.4 Medium
- honda firmwareThe Remote Keyless Entry (RKE) receiving unit on certain Honda vehicles through 2018 allows...6.4 Medium
- mazda firmwareThe Remote Keyless Entry (RKE) receiving unit on certain Mazda vehicles through 2020 allows...6.4 Medium
- ovarro tbox, tbox lt2-530 firmware, tbox lt2-532 firmware +6 more +8 moreOvarro TBox Insufficiently Protected Credentials7.5 High
- packback lti 1.3 tool library, packbackbooks lti-1-3-php-library +1 moreAuthentication Bypass by Capture-replay in packbackbooks/lti-1-3-php-library7.5 High
- dingtian-tech dt-r004 firmwarerelay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to...5.9 Medium
- omron sysmac studio, na5-12w firmware, na5-15w firmware +55 more +57 moreUse of hard-coded credentials vulnerability exists in Machine automation controller NJ series all...8.1 High
- omron nj-pa3001 firmware, nj-pd3001 firmware, nj101-1000 firmware +50 more +52 moreAuthentication bypass by capture-replay vulnerability exists in Machine automation controller NX7...7.5 High
- omron sysmac studio, na5-12w firmware, na5-15w firmware +55 more +57 moreAuthentication bypass by capture-replay vulnerability exists in Machine automation controller NJ...8.1 High
- mozilla thunderbirdAn OpenPGP digital signature includes information about the date when the signature was created....6.5 Medium
- joyebike wolf 2022 firmwareJoy ebike Wolf Manufacturing year 2022 is vulnerable to Denial of service, which allows remote...6.8 Medium
- mi xiaomi lamp 1 firmwareXiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows...8.8 High
- joybike wolf firmwarejoyebike Joy ebike Wolf Manufacturing year 2022 is vulnerable to Authentication Bypass by Capture...6.5 Medium
- wargaming world of warshipsThe replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to...8.8 High
- Show moreLoading…