CVE-2019-19104: Improper Authentication

The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator URL , violating the access-control ACL rules. This issue allows obtaining...

CVE-2018-21128: Improper Authentication

Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17...

CVE-2020-11796: Improper Authentication

In JetBrains Space through 2020-04-22, the password authentication implementation was insecure...

PT-2020-5641

Name of the Vulnerable Software and Affected Versions Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 Description The issue is related to improper authentication in Huawei AR3200 products. Attackers need to...

CVE-2020-11964: Improper Authentication

In IQrouter through 3.3.1, the Lua function diagsetpassword in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a...

CVE-2020-11965: Improper Authentication

In IQrouter through 3.3.1, there is a root user without a password, which allows attackers to gain full remote access via SSH. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration which has a required step fo...

CVE-2020-9070

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

CVE-2020-9070

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

CVE-2020-9070: Improper Authentication

Huawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205C00E201R7P2 have an improper authentication vulnerability. The software insufficiently validate the user's identity when a user wants to do certain operation. An attacker can trick user into installing a malicious application to...

CVE-2020-1803: Improper Authentication

Huawei smartphones Honor V20 with versions earlier than 10.0.0.179C636E3R4P3,versions earlier than 10.0.0.180C185E3R3P3,versions earlier than 10.0.0.180C432E10R3P4 have an information disclosure vulnerability. The device does not sufficiently validate the identity of smart wearable device in...

PT-2020-20471

Name of the Vulnerable Software and Affected Versions Huawei smartphones Taurus-AL00B versions earlier than 10.0.0.205C00E201R7P2 Description The issue is related to improper authentication, where the software does not sufficiently validate a user's identity for certain operations. This can be...

CVE-2020-9277: Improper Authentication

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. Authentication can be bypassed when accessing cgi modules. This allows one to perform administrative tasks e.g., modify the admin password with no authentication...

CVE-2019-20786: Improper Authentication

handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completion...

CVE-2020-8148: Improper Authentication

UniFi Cloud Key firmware 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicious API request. This affects Cloud Key gen2 and Cloud Key gen2 Plus...

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

CVE-2020-1801

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

CVE-2020-1801

The CVE-2020-1801 entry describes an improper authentication vulnerability in Huawei Mate 30 Pro and Mate 30 smartphones. The issue arises from certain system function interfaces not sufficiently validating the caller’s identity in specific share scenarios, potentially leading to information disc...

CVE-2020-1801: Improper Authentication

There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro...

PT-2020-15073

Name of the Vulnerable Software and Affected Versions Mate 30 Pro versions earlier than 10.0.0.205C00E202R7P2 Mate 30 versions earlier than 10.0.0.205C00E201R7P2 Description The issue is related to improper authentication in certain smartphones. A function interface in the system does not...