CVE-2018-10603: Missing Authentication for Critical Function

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process...

CVE-2017-2637: Missing Authentication for Critical Function

A design flaw issue was found in the Red Hat OpenStack Platform director use of TripleO to enable libvirtd based live-migration. Libvirtd is deployed by default by director listening on 0.0.0.0 all interfaces with no-authentication or encryption. Anyone able to make a TCP connection to any comput...

CVE-2017-3217: Missing Authentication for Critical Function

CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS text message interface that can be deployed where no password is configured for this interface by the integrator / reseller. This interface must be password protected, otherwise, the attacker only needs to know the phone number of the...

CVE-2018-0374: Missing Authentication for Critical Function

A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connect directly to the Policy Builder database. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by connecting...

CVE-2018-0377: Missing Authentication for Critical Function

A vulnerability in the Open Systems Gateway initiative OSGi interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to directly connect to the OSGi interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability b...

CVE-2018-0376: Missing Authentication for Critical Function

A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to access the Policy Builder interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by accessing the Policy...

CVE-2017-2638: Missing Authentication for Critical Function

It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints. An attacker could use this vulnerability to read or modify data in the default cache or a known cache name...

CVE-2016-6544: Missing Authentication for Critical Function

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device...

CVE-2016-9496: Missing Authentication for Critical Function

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://ip/com/gatewayreset or http://ip/cgi/reboot.bin to cause the modem to reboot...

CVE-2018-4854: Missing Authentication for Critical Function

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the administrative client stored on the device. If a legitimate user downloads and executes the modified client from the affected device,...

CVE-2018-7778: Missing Authentication for Critical Function

In Schneider Electric Evlink Charging Station versions prior to v3.2.0-12v1, the Web Interface has an issue that may allow a remote attacker to gain administrative privileges without properly authenticating remote users...

CVE-2018-4853: Missing Authentication for Critical Function

A vulnerability has been identified in SICLOCK TC100 All versions and SICLOCK TC400 All versions. An attacker with network access to port 69/udp could modify the firmware of the device...

Security Bulletin: Missing Authentication for Critical Function affects IBM Security Guardium (CVE-2017-1258)

Summary IBM Security Guardium does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2017-1258 DESCRIPTION: IBM Security Guardium does...

CVE-2011-4190: Missing Authentication for Critical Function

The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is similar to CVE-2011-3588, but different in that the kdump implementation is specific to SUSE. A remote malicious kdump server could use this fl...

CVE-2018-11476: Missing Authentication for Critical Function

An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle devices. The dongle opens an unprotected wireless LAN that cannot be configured with encryption or a password. This enables anyone within the range of the WLAN to connect to the network without authentication...

CVE-2018-5338

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing authentication/authorization for a database query mechanism...

CVE-2018-5338: Missing Authentication for Critical Function

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: missing authentication/authorization for a database query mechanism...

CVE-2018-5339: Missing Authentication for Critical Function

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: insufficient enforcement of database query type restrictions...

PT-2018-16906

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central versions 10.0.124 through 10.0.184 Description An issue was discovered in the software, related to missing authentication/authorization for a database query mechanism. Recommendations For versions 10.0.124...

CVE-2018-9119: Missing Authentication for Critical Function

An attacker with physical access to a BrilliantTS FUZE card MCU firmware 0.1.73, BLE firmware 0.7.4 can unlock the card, extract credit card numbers, and tamper with data on the card via Bluetooth because no authentication is needed, as demonstrated by gatttool...