Vulnerabilities > Improper Authentication

DATE CVE VULNERABILITY TITLE RISK
2023-08-23 CVE-2023-40282 Improper Authentication vulnerability in Rakuten Wifi Pocket Firmware
Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen.
low complexity
rakuten CWE-287
5.4
2023-08-23 CVE-2023-38585 Improper Authentication vulnerability in CBC products
Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings.
network
low complexity
cbc CWE-287
8.8
2023-08-21 CVE-2023-25913 Improper Authentication vulnerability in Danfoss Ak-Sm 800A Firmware 3.3
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
network
low complexity
danfoss CWE-287
7.5
2023-08-21 CVE-2023-4373 Improper Authentication vulnerability in Devolutions Remote Desktop Manager
Inadequate validation of permissions when employing remote tools and macros within Devolutions Remote Desktop Manager versions 2023.2.19 and earlier permits a user to initiate a connection without proper execution rights via the remote tools feature.
network
low complexity
devolutions CWE-287
critical
9.8
2023-08-18 CVE-2023-4415 Improper Authentication vulnerability in Ruijienetworks Rg-Ew1200G Firmware 07161417R483
A vulnerability was found in Ruijie RG-EW1200G 07161417 r483.
network
low complexity
ruijienetworks CWE-287
8.8
2023-08-18 CVE-2023-39415 Improper Authentication vulnerability in Northgrid Proself 1.07/1.62/5.61
Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote unauthenticated attacker to log in to the product's Control Panel and perform an unintended operation.
network
low complexity
northgrid CWE-287
7.5
2023-08-17 CVE-2023-33237 Improper Authentication vulnerability in Moxa Tn-5900 Firmware 3.1/3.2/3.3
TN-5900 Series firmware version v3.3 and prior is vulnerable to improper-authentication vulnerability.
network
low complexity
moxa CWE-287
8.8
2023-08-16 CVE-2023-39846 Improper Authentication vulnerability in Pantsel Konga 0.14.9
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
network
low complexity
pantsel CWE-287
critical
9.8
2023-08-16 CVE-2023-32453 Improper Authentication vulnerability in Dell products
Dell BIOS contains an improper authentication vulnerability.
low complexity
dell CWE-287
3.9
2023-08-15 CVE-2023-35082 Improper Authentication vulnerability in Ivanti Endpoint Manager Mobile
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
network
low complexity
ivanti CWE-287
critical
9.8