CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

Authentication flaw

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

CVE-2022-22259

CVE-2022-22259 describes an improper authentication vulnerability in Huawei FLMG-10 devices (example: 10.0.1.0/H100SP22C00). The issue is triggered by authentication flaws that could allow an attacker to gain control of the victim device. The CVSSv3.1 vector (PHYSICAL access, LOW attack complexit...

CVE-2022-22259: Improper Authentication

There is an improper authentication vulnerability in FLMG-10 10.0.1.0H100SP22C00. Successful exploitation of this vulnerability may lead to a control of the victim device...

TP-LINK AX50 代码注入漏洞

The TP-LINK AX50 is a router device from China P&L TP-LINK. The TP-LINK AX50 suffers from a code injection vulnerability that stems from the fact that importing a malicious backup file via the web interface may result in remote code execution due to improper authentication...

CVE-2022-30749: Improper Authentication

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity...

Klapp App 授权问题漏洞

Klapp App is a Cordova-based web and mobile application from Klapp, Switzerland. A security vulnerability exists in Klapp App that stems from incorrect authentication in JSON WEB TOKEN...

Samsung mobile 输入验证错误漏洞

Samsung mobile is a cell phone from Samsung, a South Korean company. Samsung mobile RemoteViews suffers from an elevation of privilege vulnerability that stems from incorrect authentication in RemoteViews. An attacker could use this vulnerability to launch certain activities...

CVE-2020-36528: Improper Authentication

A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the...

CVE-2022-30238

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

CVE-2022-30238

Schneider Electric Wiser Smart (EER21000/EER21001, v4.5 and prior) is affected by CVE-2022-30238, a CWE-287 Improper Authentication vulnerability. The issue allows an attacker to hijack a user session and take over an admin account. Public documentation across sources confirms the affected produc...

CVE-2022-30238

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

CVE-2022-30238: Improper Authentication

A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

PT-2022-20741 · Owl · Owl Labs Meeting Owl

Name of the Vulnerable Software and Affected Versions: Owl Labs Meeting Owl version 5.2.0.15 Description: The issue is related to improper authentication. Specifically, Owl Labs Meeting Owl does not require a password for Bluetooth commands because it only uses client-side authentication...

CVE-2022-31463: Improper Authentication

Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used...

CVE-2022-26975: Improper Authentication

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication...

CVE-2022-31011: Improper Authentication

TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing HTAP workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access...

Authentication flaw

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocol...