Vulnerabilities > Missing Authentication for Critical Function
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-10 | CVE-2023-22441 | Missing Authentication for Critical Function vulnerability in Seiko-Sol products Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. | 8.6 |
| 2023-05-10 | CVE-2023-23906 | Missing Authentication for Critical Function vulnerability in Seiko-Sol products Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. | 7.5 |
| 2023-05-04 | CVE-2023-20126 | Missing Authentication for Critical Function vulnerability in Cisco Spa112 Firmware 1.4.1 A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. | 9.8 |
| 2023-04-25 | CVE-2022-40725 | Missing Authentication for Critical Function vulnerability in Pingidentity Desktop PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated. | 6.1 |
| 2023-04-19 | CVE-2023-23451 | Missing Authentication for Critical Function vulnerability in Sick products The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. | 9.8 |
| 2023-04-18 | CVE-2023-29411 | Missing Authentication for Critical Function vulnerability in Schneider-Electric products A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. | 9.8 |
| 2023-04-15 | CVE-2023-27571 | Missing Authentication for Critical Function vulnerability in Commscope Dg3450 Firmware Ar01.02.056.18041520711.Ncs.10 An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. | 5.3 |
| 2023-04-13 | CVE-2023-27747 | Missing Authentication for Critical Function vulnerability in Blackvue Dr750-2Ch IR LTE Firmware and Dr750-2Ch LTE Firmware BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. | 7.5 |
| 2023-04-11 | CVE-2022-41331 | Missing Authentication for Critical Function vulnerability in Fortinet Fortiproxy A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to access the Redis and MongoDB instances via crafted authentication requests. | 9.8 |
| 2023-04-11 | CVE-2023-24527 | Missing Authentication for Critical Function vulnerability in SAP Netweaver AS Java for Deploy Service 7.5 SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability and integrity. | 5.3 |