Vulnerabilities > Missing Authentication for Critical Function
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-05-19 | CVE-2023-2704 | Missing Authentication for Critical Function vulnerability in Vibethemes BP Social Connect The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. | 9.8 |
| 2023-05-18 | CVE-2023-20003 | Missing Authentication for Critical Function vulnerability in Cisco products A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication. | 8.8 |
| 2023-05-12 | CVE-2023-23444 | Missing Authentication for Critical Function vulnerability in Sick products Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets. | 8.2 |
| 2023-05-10 | CVE-2023-22441 | Missing Authentication for Critical Function vulnerability in Seiko-Sol products Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alter the setting information of the product or execute some critical functions without authentication, e.g., rebooting the product. | 8.6 |
| 2023-05-10 | CVE-2023-23906 | Missing Authentication for Critical Function vulnerability in Seiko-Sol products Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. | 7.5 |
| 2023-05-04 | CVE-2023-20126 | Missing Authentication for Critical Function vulnerability in Cisco Spa112 Firmware 1.4.1 A vulnerability in the web-based management interface of Cisco SPA112 2-Port Phone Adapters could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. | 9.8 |
| 2023-04-25 | CVE-2022-40725 | Missing Authentication for Critical Function vulnerability in Pingidentity Desktop PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated. | 6.1 |
| 2023-04-19 | CVE-2023-23451 | Missing Authentication for Critical Function vulnerability in Sick products The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. | 9.8 |
| 2023-04-18 | CVE-2023-29411 | Missing Authentication for Critical Function vulnerability in Schneider-Electric products A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remote code execution without requiring prior authentication on the Java RMI interface. | 9.8 |
| 2023-04-15 | CVE-2023-27571 | Missing Authentication for Critical Function vulnerability in Commscope Dg3450 Firmware Ar01.02.056.18041520711.Ncs.10 An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. | 5.3 |