Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2021-02-11 CVE-2021-22652 Missing Authentication for Critical Function vulnerability in Advantech Iview 5.6/5.7/5.7.02
Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.
network
low complexity
advantech CWE-306
critical
9.8
2021-02-09 CVE-2020-26192 Missing Authentication for Critical Function vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.0 - 9.1.0 contain a privilege escalation vulnerability.
local
low complexity
dell CWE-306
7.8
2021-02-09 CVE-2021-21472 Missing Authentication for Critical Function vulnerability in SAP Software Provisioning Manager 1.0
SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack, Security Downgrade.
network
low complexity
sap CWE-306
8.8
2021-02-09 CVE-2020-15798 Missing Authentication for Critical Function vulnerability in Siemens products
A vulnerability has been identified in SIMATIC HMI Comfort Panels (incl.
network
low complexity
siemens CWE-306
critical
9.8
2021-02-05 CVE-2020-10537 Missing Authentication for Critical Function vulnerability in Epikur 20.1.0.1
An issue was discovered in Epikur before 20.1.1.
local
low complexity
epikur CWE-306
7.8
2021-02-04 CVE-2020-14245 Missing Authentication for Critical Function vulnerability in Hcltechsw Onetest Performance
HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources.
network
low complexity
hcltechsw CWE-306
critical
9.8
2021-02-03 CVE-2020-29165 Missing Authentication for Critical Function vulnerability in Rainbowfishsoftware Pacsone Server
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
network
low complexity
rainbowfishsoftware CWE-306
critical
9.8
2021-02-01 CVE-2020-15834 Missing Authentication for Critical Function vulnerability in Mofinetwork Mofi4500-4Gxelte Firmware 4.1.5Std
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices.
network
low complexity
mofinetwork CWE-306
7.5
2021-02-01 CVE-2020-13856 Missing Authentication for Critical Function vulnerability in Mofinetwork Mofi4500-4Gxelte Firmware 4.0.8Std
An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices.
network
low complexity
mofinetwork CWE-306
7.5
2021-01-27 CVE-2021-25312 Missing Authentication for Critical Function vulnerability in Wisc Htcondor
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
network
low complexity
wisc CWE-306
8.8