CWE-656: Reliance on Security Through Obscurity
The product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.
Also known as Never Assuming your secrets are safe.
A kind of CWE-657 Violation of Secure Design Principles.
From the CWE List. © The MITRE Corporation.
Newest
- typo3 extension "accessible form captcha" Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha) 6.9 Medium
- geovision gv-ip device utility GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability 9.3 Critical
- geovision inc. gv-ip device utility GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability 9.3 Critical
- dormakaba kaba exos 9300 Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300 8.5 High
- byd dilink os BYD DiLink OS Incorrect encryption Implementation of system log dumps 5.1 Medium
- weidmueller ie-sw-pl10m-3gt-7tx, ie-sw-pl10mt-3gt-7tx, ie-sw-pl16m-16tx +10 more +12 more Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches 9.8 Critical
- macro-video v380 pro An issue in Macro-video Technologies Co.,Ltd V380 Pro android application 2.1.44 and V380 Pro... 3.4 Low
- moxa eds-508a series, pt-508 series, pt-510 series +7 more +9 more Frontend Authorization Logic Disclosure Vulnerability 9.2 Critical
- moxa edf-g1002-bp series, edr-8010 series, edr-810 series +7 more +9 more Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances 8.6 High
- tp-link omada er605, omada er605 firmware +1 more TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability 5.0 Medium
- ufactory xarm 5 lite, xarm 6 and xarm 7, xarm 5 lite firmware, xarm 6 firmware +1 more +3 more RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoS 9.4 Critical
- ufactory xarm5 lite, xarm 6 and xarm 7, xarm studio +1 more RVD#3321: No Authentication required to exert manual control of the robot 9.1 Critical
- easyrobotics er-flex firmware, er-lite firmware, er-one firmware +8 more +10 more RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalation 6.4 Medium