669 matches found
CVE-2024-22066: Authentication Bypass by Capture-replay
There is a privilege escalation vulnerability in ZTE ZXR10 ZSR V2 intelligent multi service router . An authenticated attacker could use the vulnerability to obtain sensitive information about the device...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
PT-2024-31883
Name of the Vulnerable Software and Affected Versions IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description The issue is related to Authentication Bypass by Capture-replay, which allows unauthorized access. Recommendations For IoT Haat Smart Plug IH-IN-16A-S version 5.16.1, consider disablin...
CVE-2024-46041
The IoT Haat Smart Plug IH-IN-16A-S (Application Software Version v5.16.1 ) is vulnerable to an Authentication Bypass by Capture-replay . During the provisioning phase, an attacker can perform a replay attack by replacing a legitimate authentication token with an attacker-controlled token. This v...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
CVE-2024-46041: Authentication Bypass by Capture-replay
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
CVE-2024-46041
IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...
CVE-2024-43099: Authentication Bypass by Capture-replay
The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this session key, they can inject traffic into a...
CVE-2024-45244: Authentication Bypass by Capture-replay
Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window...
GO-2022-0889 Authentication bypass by capture-replay in github.com/cosmos/ethermint
Authentication bypass by capture-replay in github.com/cosmos/ethermint...
GO-2022-0813 Authentication bypass by capture-replay in github.com/cosmos/ethermint
Authentication bypass by capture-replay in github.com/cosmos/ethermint...
GO-2022-0310 Capture-replay in Gitea in code.gitea.io/gitea
Capture-replay in Gitea in code.gitea.io/gitea...
GO-2023-1659 Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer
Answer vulnerable to Authentication Bypass by Capture-replay in github.com/answerdev/answer...
CVE-2024-38890
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...
CVE-2024-38890
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...
CVE-2024-38890
An issue in Horizon Business Services Inc. Caterease Software (versions 16.0.1.1663 through 24.0.1.2405 and possibly later) allows a local attacker to perform an Authentication Bypass . This is caused by insufficient protection against capture-replay attacks . While no specific patch version is c...
CVE-2024-38890
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...
CVE-2024-38890
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...
PT-2024-28262 · Horizon Business Services Inc. · Caterease
Name of the Vulnerable Software and Affected Versions: Horizon Business Services Inc. Caterease Software versions 16.0.1.1663 through 24.0.1.2405 Description: The issue allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against...
CVE-2024-38890: Authentication Bypass by Capture-replay
An issue in Horizon Business Services Inc. Caterease Software 16.0.1.1663 through 24.0.1.2405 and possibly later versions allows a local attacker to perform an Authentication Bypass by Capture-replay attack due to insufficient protection against capture-replay attacks...