CWE-288
Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
612 vulnerabilities with CWE-288
CVE-2019-5451
MEDIUM
Nextcloud Android App < 3.6.1 - Unauthenticated Lock Protection Bypass
CVSS 4.6
CVE-2019-6551
HIGH
Pangea Communications Internet FAX ATA <3.1.8 - Auth Bypass
CVSS 7.5
CVE-2018-19000
MEDIUM
LCDS Laquis SCADA < 4.1.0.4150 - Authentication Bypass
CVSS 5.3
CVE-2018-17918
CRITICAL
Circontrol CirCarLife < 4.3.1 - Authentication Bypass via Specific Page URL
CVSS 9.8
CVE-2018-8859
CRITICAL
Echelon SmartServer <4.11.007, i.LON 100 - Auth Bypass
CVSS 9.8
CVE-2018-5386
HIGH
Navarino Infinity <2.2 - Info Disclosure
CVSS 7.5
CVE-2018-4852
CRITICAL
SICLOCK TC100 and TC400 - Authentication Bypass via Device-Specific Knowledge
CVSS 9.8
CVE-2018-10841
HIGH
glusterfs < 4.1.8 - Authenticated Privilege Escalation via Trusted Storage Pool Manipulation
CVSS 8.8
CVE-2017-9944
CRITICAL
Siemens 7KT PAC1200 Data Manager < V2.03 - Unauthenticated Privilege Escalation via Web Server
CVSS 9.8
CVE-2017-6871
MEDIUM
Siemens SIMATIC WinCC Sm@rtClient - Auth Bypass
CVSS 5.4
CVE-2017-5174
CRITICAL
Geutebruck IP Camera G-Cam/EFD-2250 <1.11.0.12 - Auth Bypass
CVSS 9.8
CVE-2016-9497
HIGH
Hughes HN7740S DW7000 HN7000S/SM Firmware - Unauthenticated Authentication Bypass via Telnet Port 1953
CVSS 8.8
Details
Vulnerabilities
612