CVE-2023-30708: Improper Authentication

Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 14.5.01.2, which stemmed from improper authentication of Gallery's...

SAMSUNG Mobile devices Authorization Issues Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung. A security vulnerability previously existed in SAMSUNG Mobile devices version 14.5.01.2, which stemmed from improper authentication in Gallery's LocalProvier...

CVE-2023-30725: Improper Authentication

Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider...

CVE-2023-30711: Undefined Security Weakness

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider...

CVE-2023-4498: Improper Authentication

Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability previously existed in SAMSUNG Mobile devices SMR SEP-2023 Release 1 version, which stemmed from improper authentication in Phone and Messaging...

CVE-2023-37284: Improper Authentication

Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20JPV1230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication...

CVE-2023-20238: Improper Authentication

A vulnerability in the single sign-on SSO implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required to access an affected system. This vulnerability is due to th...

PT-2023-22926 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the GallerySearchProvider of Gallery, allowing an attacker to access search history. Recommendations: For versions prior to 14.5.01.2, update ...

PT-2023-22908 · Unknown · Secsettings

Name of the Vulnerable Software and Affected Versions: SecSettings versions prior to SMR Sep-2023 Release 1 Description: The issue is related to improper authentication in SecSettings, allowing an attacker to access Captive Portal Wi-Fi even when it is in Reactivation Lock status. Recommendations...

CVE-2023-41751: Improper Authentication

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078 Ivanti Endpoi...

CVE-2023-32202

Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device...

CVE-2023-32202 Walchem Intuition Improper Authentication

Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are stored in a format that could allow an attacker to use them as-is to login and gain access to the device...

CVE-2023-40282

Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed...

Rakuten WiFi Pocket vulnerable to improper authentication

Overview Rakuten WiFi Pocket provided by Rakuten Mobile, Inc. is a mobile router. Management Screen of Rakuten WiFi Pocket contains an improper authentication vulnerability CWE-287. Sato Nobuhiro of Suzuki Motor Corporation and You Okuma of LAC Co., Ltd. reported this vulnerability to IPA...

CVE-2023-40282

The CVE-2023-40282 entry concerns Rakuten WiFi Pocket, with an improper authentication vulnerability (CWE-287) that allows a network-adjacent attacker to log in to the Management Screen. Affected: Rakuten WiFi Pocket (all versions mentioned as affected; 2B/2C reportedly unaffected per JVN). Root ...

CVE-2023-38585

CVE-2023-38585 affects CBC America DVRs (NR-4H/8H/16H and DR-16F/8F/4F/16H/8H/4H/4M41 etc.). Root cause: improper authentication allowing a remote authenticated attacker to execute arbitrary OS commands or alter settings. Many affected NR/DR series are no longer supported and updates are not prov...

CVE-2023-38585

Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series a...