CWE-294: Authentication Bypass by Capture-replay
A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- autoeastern cyclone matrix trfAutoeastern Smart Keyless Entry System Replay Attack9.4 Critical
- kia aftermarket generic smart keyless entry systemKIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack9.4 Critical
- salt project saltCVE-2024-38823 Salt Advisory2.7 Low
- tiiwee twx1hakv2 firmwareTiiwee X1 Alarm System TWX1HAKV2 allows Authentication Bypass by Capture-replay, leading to...7.6 High
- drupal one time password, one time password project time password +1 moreOne Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-0634.8 Medium
- drupal enterprise mfa - tfa for drupal, miniorange 2fa +1 moreEnterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-0524.8 Medium
- zitadelZITADEL Allows IdP Intent Token Reuse8.0 High
- No product listedA replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix ...9.1 Critical
- elfatek elektronics anka jpd-00028Authentication Bypass in Elfatek Elektronics' ANKA JPD-000287.6 High
- sage 200 spainSMB forced authentication vulnerability in Sage 200 Spain7.1 High
- No product listedCredential disclosure vulnerability via the /staff route in GreaterWMS <= 2.1.49 allows a remote...9.1 Critical
- changing information technology cgfidoChanging Information Technology CGFIDO - Authentication Bypass8.8 High
- dell ecs, elastic cloud storage +1 moreDell ECS, version(s) prior to ECS 3.8.1.3, contain(s) an Authentication Bypass by Capture-replay...5.4 Medium
- dell wyse management suiteDell Wyse Management Suite, version WMS 4.4 and before, contain an Authentication Bypass by...7.6 High
- google androidIn the development options section of the Settings app, there is a possible authentication bypass...7.8 High
- mattermost, mattermost server +1 moreMFA Code Replay3.1 Low
- veeam enterprise manager, backup \& replication +1 moreA vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which...7.7 High
- zte zxr10 1800-2s, zxr10 160 firmware, zxr10 1800-2s firmware +2 more +4 moreThere is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service...7.5 High
- iothaat smart plug ih in 16a sIoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay.8.8 High
- jktyre smart tyre car \& bikeAn issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack...4.2 Medium
- automationdirect directlogic h2-dm1e, h2-dm1e firmware +1 moreAutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay8.7 High
- open-policy-agent opa, openpolicyagent open policy agent +1 moreOPA SMB Force-Authentication6.1 Medium
- hitachi microscada x sys600, hitachi energy microscada sys600 +1 moreAn attacker with local access to machine where MicroSCADA X SYS600 is installed, could enable the...8.2 High
- hyperledger fabricHyperledger Fabric does not verify request has a timestamp within the expected time window5.3 Medium
- horizoncloud catereaseAn issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and...8.4 High
- akana api platform, perforce akana api +1 moreSAML Replay in Akana5.4 Medium
- d-link dsl-225, dsl-225 firmware +1 moreD-Link - CWE-294: Authentication Bypass by Capture-replay9.8 Critical
- mengshen m70Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay...6.8 Medium
- google nearbyAuth Bypass in Quick Share7.1 High
- motorola solutions vigilant fixed lpr coms box (bcav1f2-c600), motorolasolutions vigilant fixed lpr coms box +1 moreAuthentication Bypass by Capture-replay in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)8.7 High
- strapi@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass7.1 High
- abb 2tma310010b0001 firmware, 2tma310010b0003 firmware, 2tma310011b0001 firmware +14 more +16 moreReplay Attack in KNX Secure Devices7.3 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise...7.2 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows account takeover via NTLM relay.8.8 High
- hexo themesAn issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass...9.8 Critical
- workos authkit-nextjs@workos-inc/authkit-nextjs session replay vulnerability4.8 Medium
- stilog visual planning 8An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an...9.8 Critical
- mitsubishi electric corporation melsec ws series ws0-geth00200, mitsubishielectric melsec ws0-geth00200 firmware +1 moreAuthentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC...5.9 Medium
- meross msh30q, msh30q firmware +1 moreThe radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to...8.8 High
- hozard alarm systemThe remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical...5.3 Medium
- u-tec ultraloq ul3 bt firmwareIncorrect Session Management and Credential Re-use in the Bluetooth LE stack of the Ultraloq UL3...8.1 High
- nec expresscluster x, expresscluster x singleserversafe, nec corporation clusterpro x (expresscluster x) +1 more +3 moreCLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X...8.8 High
- siemens mendix, mendix applications using mendix 10, mendix applications using mendix 7 +2 more +4 moreA vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4...6.8 Medium
- baker hughes - bently nevada bently nevada 3500 system, bakerhughes bentley nevada 3500 system firmware +1 moreBaker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay5.4 Medium
- simplesamlphp saml2Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation7.5 High
- hp oneview, hewlett packard enterprise (hpe) hpe oneview, hpe oneview global dashboard +2 moreA remote authentication bypass issue exists in some OneView APIs.9.8 Critical
- hyundai model (2017), 2017 firmware +1 moreHyundai car CWE-294: Authentication Bypass by Capture-replay7.4 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor with man-in...7.1 High
- showmojo mojobox, mojobox firmware +1 moreShowMojo MojoBox Digital Lockbox 1.4 is vulnerable to Authentication Bypass. The implementation...8.1 High
- huawei emui, harmonyos +1 moreVulnerability of identity verification being bypassed in the storage module. Successful...7.5 High
- Show moreLoading…