CWE-294 · Authentication
Authentication Bypass by Capture-replay
302CVEs
0exploited
0with a public check
5likely (EPSS 10%+)
SortMost likely exploited
302 CVEs with CWE-294 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-3191D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remo…D-Link · DIR-130 · 2017-12-15 | – | 63% | 2017-12-15 |
| CVE-2023-49231An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to receive an administrative API token.No vendor recorded · CVSS 9.8 · 2024-03-29 | 9.8 | 43% | 2024-03-29 |
| CVE-2002-0054SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows rem…Microsoft · Exchange Server · 2003-04-02 | – | 22% | 2003-04-02 |
| CVE-2022-29593relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/au…Dingtian-Tech · Dt-R004 Firmware · CVSS 5.9 · 2022-07-14 | 5.9 | 13% | 2022-07-14 |
| CVE-2022-22806A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a malformed connection is sent. Affected Pro…Schneider Electric · SmartConnect · 2022-03-09 | – | 12% | 2022-03-09 |
| CVE-2017-11786Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Bus…Microsoft Corporation · Skype for Business · 2017-10-13 | – | 9.4% | 2017-10-13 |
| CVE-2017-6823Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.Fiyo · Fiyo Cms · 2017-03-12 | – | 8.0% | 2017-03-12 |
| CVE-2017-6034Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replaySchneider Electric · Modicon Modbus Protocol · CVSS 9.8 · 2017-06-30 | 9.8 | 5.6% | 2017-06-30 |
| CVE-2020-15688The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass…Embedthis · Goahead · 2020-07-23 | – | 4.0% | 2020-07-23 |
| CVE-2021-46145The keyfob subsystem in Honda Civic 2012 vehicles allows a replay attack for unlocking. This is related to a non-expiring rolling code and counter resynchronization.Honda · Civic 2012 · 2022-01-06 | – | 3.4% | 2022-01-06 |
| CVE-2021-27572An issue was discovered in Emote Remote Mouse through 4.0.0.0. Authentication Bypass can occur via Packet Replay. Remote unauthenticated users can execute arbitrary code via craft…Remotemouse · Emote Remote Mouse · 2021-05-07 | – | 3.2% | 2021-05-07 |
| CVE-2021-31958Windows NTLM Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2021-06-08 | 7.5 | 2.6% | 2021-06-08 |
| CVE-2020-24722An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-10-05, as used in COVID-19 applications on Android and iOS. The encrypted metad…Exposure Notifications Project · Exposure Notifications · 2020-10-07 | – | 2.5% | 2020-10-07 |
| CVE-2018-7790An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allo…Schneider Electric SE · Modicon M221, all references, all versions prior to firmware V1.6.2.0 · CVSS 9.8 · 2018-08-29 | 9.8 | 2.4% | 2018-08-29 |
| CVE-2022-25159Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions, Mitsubishi Electric MELSEC iQ-F series FX5UJ CPU all vers…Mitsubishielectric · Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU; Mitsubishi Electric MELSEC… · 2022-04-01 | – | 2.2% | 2022-04-01 |
| CVE-2013-1351Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.Veraxsystems · Network Management System · 2020-01-30 | – | 2.0% | 2020-01-30 |
| CVE-2022-33208Authentication bypass by capture-replay vulnerability exists in Machine automation controller NJ series all models V 1.48 and earlier, Machine automation controller NX7 series all…OMRON Corporation · Machine automation controller NJ series, Machine automation controller NX serie… · 2022-07-04 | – | 1.9% | 2022-07-04 |
| CVE-2022-43704The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sini…Sinilink · Xy-Wft1 Firmware · CVSS 5.9 · 2023-01-20 | 5.9 | 1.9% | 2023-01-20 |
| CVE-2021-38296Apache Spark Key Negotiation VulnerabilityApache Software Foundation · Apache Spark · 2022-03-10 | – | 1.8% | 2022-03-10 |
| CVE-2022-31265The replay feature in the client in Wargaming World of Warships 0.11.4 allows remote attackers to execute code when a user launches a replay from an untrusted source.Wargaming · World Of Warships · 2022-05-26 | – | 1.8% | 2022-05-26 |
| CVE-2020-10185The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate…Yubico · Yubikey One Time Password Validation Server · 2020-03-05 | – | 1.7% | 2020-03-05 |
| CVE-2019-11334An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources (that are not otherw…Tzumi · Klic Lock · 2019-06-11 | – | 1.6% | 2019-06-11 |
| CVE-2018-17903SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.GAIN Electronic Co. Ltd · SAGA1-L8B · 2018-10-24 | – | 1.6% | 2018-10-24 |
| CVE-2022-41541TP-Link AX10v1 V1_211117 allows attackers to execute a replay attack by using a previously transmitted encrypted authentication message and valid authentication token. Attackers a…Tp-Link · Ax10 Firmware · CVSS 8.1 · 2022-10-18 | 8.1 | 1.5% | 2022-10-18 |
| CVE-2023-30909A remote authentication bypass issue exists in some OneView APIs.Hewlett Packard Enterprise (HPE) · HPE OneView · CVSS 9.8 · 2023-09-14 | 9.8 | 1.5% | 2023-09-14 |
| CVE-2022-42731mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge…Django-Mfa2 Project · Django-Mfa2 · CVSS 7.5 · 2022-10-11 | 7.5 | 1.5% | 2022-10-11 |
| CVE-2018-19025In JUUKO K-808, an attacker could specially craft a packet that encodes an arbitrary command, which could be executed on the K-808 (Firmware versions prior to numbers ending ...9A…Juuko · JUUKO K-808 · 2020-11-02 | – | 1.5% | 2020-11-02 |
| CVE-2018-17932JUUKO K-800 (Firmware versions prior to numbers ending ...9A, ...9B, ...9C, etc.) is vulnerable to a replay attack and command forgery, which could allow attackers to replay comma…Juuko · JUUKO K-800 · 2020-11-02 | – | 1.5% | 2020-11-02 |
| CVE-2020-5261Missing Token Replay DetectionSustainsys · Saml2 · CVSS 8.2 · 2020-03-25 | 8.2 | 1.5% | 2020-03-25 |
| CVE-2022-45789A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticat…Schneider Electric · EcoStruxure Control Expert · CVSS 8.1 · 2023-01-31 | 8.1 | 1.5% | 2023-01-31 |
| CVE-2023-20900A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in…Vmware · VMware Tools · CVSS 7.1 · 2023-08-31 | 7.1 | 1.5% | 2023-08-31 |
| CVE-2021-22267Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L…Hpe · Web Viewpoint · 2021-02-09 | – | 1.4% | 2021-02-09 |
| CVE-2018-1128It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who i…Red Hat, Inc. · ceph · 2018-07-10 | – | 1.4% | 2018-07-10 |
| CVE-2019-18226Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay atta…Honeywell · Honeywell equIP series cameras, Honeywell Performance series IP cameras, Honeyw… · 2019-10-31 | – | 1.4% | 2019-10-31 |
| CVE-2020-28713Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS serve…Nightowlsp · Smart Doorbell Firmware · 2021-06-08 | – | 1.4% | 2021-06-08 |
| CVE-2019-9659The Chuango 433 MHz burglar-alarm product line uses static codes in the RF remote control, allowing an attacker to arm, disarm, or trigger the alarm remotely via replay attacks, a…Chuango · Wifi Alarm System Firmware · 2019-03-11 | – | 1.3% | 2019-03-11 |
| CVE-2021-25835Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature scheme…Chainsafe · Ethermint · 2021-02-08 | – | 1.3% | 2021-02-08 |
| CVE-2020-6972In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.Honeywell · Notifier Web Server (NWS) Version 3.50 and earlier · 2020-03-24 | – | 1.3% | 2020-03-24 |
| CVE-2023-2846Authentication Bypass Vulnerability in MELSEC-F Series main moduleMitsubishi Electric Corporation · MELSEC-F Series FX3U-16MR/ES · CVSS 7.5 · 2023-06-30 | 7.5 | 1.3% | 2023-06-30 |
| CVE-2022-37011A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 9…Siemens · Mendix SAML (Mendix 7 compatible) · 2022-09-13 | – | 1.3% | 2022-09-13 |
| CVE-2022-29334An issue in H v1.0 allows attackers to bypass authentication via a session replay attack.H Project · H · 2022-05-24 | – | 1.2% | 2022-05-24 |
| CVE-2018-15498YSoft SafeQ Server 6 allows a replay attack.Ysoft · Safeq Server Client · 2019-03-19 | – | 1.2% | 2019-03-19 |
| CVE-2019-12887KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).Keyidentity · Linotp · 2019-06-27 | – | 1.2% | 2019-06-27 |
| CVE-2021-25834Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay…Chainsafe · Ethermint · 2021-02-08 | – | 1.2% | 2021-02-08 |
| CVE-2018-13789An issue was discovered in Descor Infocad FM before 3.1.0.0. An unauthenticated web service allows the retrieval of files on the web server and on reachable SMB servers.Descor · Infocad Fm · 2018-10-10 | – | 1.2% | 2018-10-10 |
| CVE-2022-29878A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices use a limited range for challenges that are sent during the unencrypted challenge-response c…Siemens · SICAM T · CVSS 7.5 · 2022-05-10 | 7.5 | 1.1% | 2022-05-10 |
| CVE-2019-12393Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.Anviz · Management System · 2019-12-02 | – | 1.1% | 2019-12-02 |
| CVE-2020-10045A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An error in the challenge-response procedure cou…Siemens AG · SICAM MMU · 2020-07-14 | – | 1.1% | 2020-07-14 |
| CVE-2022-27254The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.Honda · Civic 2018 Firmware · 2022-03-23 | – | 1.0% | 2022-03-23 |
| CVE-2021-39364Honeywell HDZP252DI 1.00.HW02.4 and HBW2PER1 1.000.HW01.3 devices allow command spoofing (for camera control) after ARP cache poisoning has been achieved.Honeywell · Hdzp252di Firmware · 2022-02-24 | – | 1.0% | 2022-02-24 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.