Authentication flaw

Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

CVE-2024-20816

Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

CVE-2024-20816

CVE-2024-20816 involves an improper authentication vulnerability in Samsung Auto Hotspot’s onCharacteristicWriteRequest. The issue allows adjacent attackers to connect to a victim’s mobile hotspot without user awareness. Root cause: insufficient authentication checks on the public interface used ...

CVE-2024-20816

Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

CVE-2024-20815

Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

CVE-2024-20815

The CVE-2024-20815 affects Auto Hotspot’s onCharacteristicReadRequest. Multiple authoritative sources (including PT-Security PT-2024-18722) describe an improper authentication vulnerability that lets adjacent attackers connect to a victim’s hotspot without user awareness. The issue is tied to Aut...

CVE-2024-20816: Improper Authentication

Improper authentication vulnerability in onCharacteristicWriteRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

CVE-2024-20815: Improper Authentication

Improper authentication vulnerability in onCharacteristicReadRequest in Auto Hotspot prior to SMR Feb-2024 Release 1 allows adjacent attackers connect to victim's mobile hotspot without user awareness...

PT-2024-18723 · Unknown · Auto Hotspot

Name of the Vulnerable Software and Affected Versions: Auto Hotspot versions prior to SMR Feb-2024 Release 1 Description: The issue is related to an improper authentication vulnerability in the onCharacteristicWriteRequest function. This allows adjacent attackers to connect to a victim's mobile...

QNAP QuTScloud c5.x < c5.1.5.2651 Multiple Vulnerabilities

QNAP QuTScloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud"; ifdescripti...

PT-2024-18722 · Unknown · Auto Hotspot

Name of the Vulnerable Software and Affected Versions: Auto Hotspot versions prior to SMR Feb-2024 Release 1 Description: The issue is related to an improper authentication vulnerability in the onCharacteristicReadRequest function of Auto Hotspot. This vulnerability allows adjacent attackers to...

QNAP QuTS hero Multiple Vulnerabilities (QSA-23-33)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

CVE-2023-39303

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

Authentication flaw

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware

cve-2017-7921-Mass-Exploit Mass Config Download python3 dow...

CVE-2023-39303: Improper Authentication

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

CVE-2023-47256: Improper Authentication

ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of proxy settings...

Improper Authentication in HashiCorp Vault

HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the remove-peer raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2...

Multiple vulnerabilities in SHARP Energy Management Controller with Cloud Services

Overview Energy Management Controller with Cloud Services provided by SHARP CORPORATION contains multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2024-23783 Improper access control CWE-284 - CVE-2024-23784 Cross-site request forgery CWE-352 - CVE-2024-23785 Stored...

PT-2024-20082

Name of the Vulnerable Software and Affected Versions Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 versions B0.1.9.1 and earlier Description The issue allows a network-adjacent unauthenticated attacker to access the affected product without authentication. This is due to an...