GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer

Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

PT-2024-28262 · Horizon Business Services Inc. · Caterease

Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...

CVE-2024-38890

CVE-2024-38890 affects Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 (potentially later) and enables a local attacker to bypass authentication via a capture-replay attack due to insufficient protection against capture-replay. The Red Hat, NVD, CVE reco...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

CVE-2024-38890

An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...

Dahua ASI7213X-T1 Authentication Bypass By Capture-Replay (CVE-2022-30561)

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...

Dahua ASI7213X-T1 Authentication Bypass By Capture-Replay (CVE-2022-30563)

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2024-38438

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38438

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-38438

CVE-2024-38438 refers to a D-Link vulnerability described as CWE-294: Authentication Bypass by Capture-replay. The connected sources list a CVSS v3.1 base score of 9.8 (Network, Privileges Required: None, User Interaction: None, Scope: Unchanged) with High impact on Confidentiality, Integrity, an...

CVE-2024-38438 D-Link - CWE-294: Authentication Bypass by Capture-replay

D-Link - CWE-294: Authentication Bypass by Capture-replay...

CVE-2024-37016

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach...

PT-2024-27244 · Mengshen · Mengshen Wireless Door Alarm M70

Name of the Vulnerable Software and Affected Versions: Mengshen Wireless Door Alarm M70 affected versions not specified Description: The issue allows for authentication bypass via a capture-replay approach. Recommendations: At the moment, there is no information about a newer version that contain...

CVE-2024-37016

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach...

CVE-2024-37016

Mengshen Wireless Door Alarm M70 2024-05-24 allows Authentication Bypass via a Capture-Replay approach...

CVE-2024-37016

The vulnerability CVE-2024-37016 affects Mengshen Wireless Door Alarm M70. The provided documents describe an authentication bypass achieved via a capture-replay approach (no exploit details disclosed). The affected device is the M70 series; remediation status and patched versions are not specifi...

Mengshen Wireless Door Alarm M70 Security Breach

The Mengshen Wireless Door Alarm M70 is a wireless alarm from Mengshen. A security vulnerability exists in Mengshen Wireless Door Alarm M70 version 2024-05-24, which originates from the ability to bypass authentication via the capture replay method...

The vulnerability of the RADIUS authentication protocol lies in the ability to bypass the authentication process by using capture-replay techniques to manipulate intercepted messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access by manipulating the authentication response.

The vulnerability of the RADIUS authentication protocol lies in the ability to bypass the authentication process by using capture-replay techniques to manipulate intercepted messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access by...