CWE-603 · Authentication
Use of Client-Side Authentication
27CVEs
SortMost likely exploited
27 CVEs with CWE-603 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-3218Necta WiFi Mouse (Mouse Server) client-side authentication bypassNecta LLC · WiFi Mouse (Mouse Server) · 2022-09-19 | – | 74% | 2022-09-19 |
| CVE-2020-6988Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prio…Rockwellautomation · Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Ser… · CVSS 7.5 · 2020-03-16 | 7.5 | 5.4% | 2020-03-16 |
| CVE-2017-7909A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior. The web interface uses JavaScript to check client au…Advantech B+b Smartworx · Advantech B+B SmartWorx MESR901 · 2017-05-06 | – | 2.6% | 2017-05-06 |
| CVE-2020-7591A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the…Siemens · SIPORT MP · 2020-10-15 | – | 1.5% | 2020-10-15 |
| CVE-2022-33139A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCC OA V3.16 (All versions in default con…Siemens · Cerberus DMS · 2022-06-21 | – | 1.3% | 2022-06-21 |
| CVE-2021-43355Fresenius Kabi Agilia Connect Infusion System use of client side authenticationFresenius Kabi · Vigilant Software Suite (Mastermed Dashboard) · CVSS 7.3 · 2022-01-21 | 7.3 | 1.0% | 2022-01-21 |
| CVE-2025-24517Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If this issue is exploited, a remote attacker may obtain the product login passw…Inaba Denki Sangyo Co., Ltd. · CHOCO TEI WATCHER mini (IB-MCT001) · CVSS 7.5 · 2025-03-31 | 7.5 | 0.8% | 2025-03-31 |
| CVE-2026-71187Ebyte NA111-M Use of Client-Side AuthenticationEbyte · Ebyte NA111-M Firmware · CVSS 9.8 · 2026-08-27 | 9.8 | 0.8% | 2026-08-27 |
| CVE-2020-27266In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDana-i and AnyDana-A mobile applications a…Sooil · SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A · 2021-01-19 | – | 0.6% | 2021-01-19 |
| CVE-2026-1363JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side SecurityJNC · IAQS · CVSS 9.8 · 2026-01-23 | 9.8 | 0.6% | 2026-01-23 |
| CVE-2024-39375Use of Client-Side Authentication in TELSAT marKoni FM TransmittermarKoni · Markoni-D (Compact) FM Transmitters · CVSS 9.3 · 2024-06-27 | 9.3 | 0.6% | 2024-06-27 |
| CVE-2025-12868CyberTutor｜New Site Server - Use of Client-Side AuthenticationCyberTutor · New Site Server · CVSS 9.8 · 2025-11-10 | 9.8 | 0.6% | 2025-11-10 |
| CVE-2026-66305Skype for Business Spoofing VulnerabilityMicrosoft · Skype for Business Server 2015 CU13 · CVSS 7.1 · 2026-09-08 | 7.1 | 0.5% | 2026-09-08 |
| CVE-2025-62649The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equipment orders.Restaurant Brands International · assistant platform · CVSS 5.8 · 2025-10-17 | 5.8 | 0.5% | 2025-10-17 |
| CVE-2026-76945Ebyte NE2-D11 Use of Client-Side AuthenticationEbyte · Ebyte NE2-D11 Firmware · CVSS 7.5 · 2026-08-27 | 7.5 | 0.5% | 2026-08-27 |
| CVE-2025-62650The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostic screen.Restaurant Brands International · assistant platform · CVSS 8.3 · 2025-10-17 | 8.3 | 0.5% | 2025-10-17 |
| CVE-2024-52327ECOVACS lawnmower and vacuum cloud service live video PIN bypassECOVACS · ECOVACS HOME · CVSS 6.5 · 2025-01-23 | 6.5 | 0.5% | 2025-01-23 |
| CVE-2025-64119Nuvation Energy BMS Client-side AuthenticationNuvation Energy · Battery Management System · CVSS 9.3 · 2026-01-02 | 9.3 | 0.5% | 2026-01-02 |
| CVE-2024-45785MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability is exploited, other users' credential and sensitive information may be retrieved.NEUMANN CO.LTD. · MUSASI · CVSS 7.5 · 2024-10-25 | 7.5 | 0.4% | 2024-10-25 |
| CVE-2026-42098Authorization Bypass in Sparx Enterprise ArchitectSparx Systems · Enterprise Architect · CVSS 8.7 · 2026-05-19 | 8.7 | 0.4% | 2026-05-19 |
| CVE-2026-8830Keycloak: org.keycloak/keycloak-services: keycloak: policy bypass during webauthn credential registration via client-side javascript manipulationRed Hat · Red Hat build of Keycloak 26.4 · CVSS 4.3 · 2026-05-19 | 4.3 | 0.4% | 2026-05-19 |
| CVE-2025-61940Mirion Medical EC2 Software NMIS BioDose Use of Client-Side AuthenticationMirion Medical · EC2 Software NMIS BioDose · CVSS 8.3 · 2025-12-02 | 8.3 | 0.3% | 2025-12-02 |
| CVE-2026-3096Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential TheftWSO2 · WSO2 API Control Plane · CVSS 4.7 · 2026-09-10 | 4.7 | 0.3% | 2026-09-10 |
| CVE-2026-90983OTP Code Exposure in Hayat Hospital's Hayat MobileHayat Health Facilities Inc. (Hayat Hospital) · Hayat Mobile · CVSS 8.2 · 2026-10-09 | 8.2 | 0.3% | 2026-10-09 |
| CVE-2026-110972Use of Client-Side Authentication in PłatnikZakład Ubezpieczeń Społecznych · Płatnik · CVSS 8.6 · 2026-10-30 | 8.6 | 0.2% | 2026-10-30 |
| CVE-2026-40551Use of Client-Side Authentication in multiple BinSoft productsBinSoft · mpGabinet · CVSS 8.4 · 2026-04-28 | 8.4 | 0.1% | 2026-04-28 |
| CVE-2025-30042Session generation possible with certificate number onlyCGM · CGM CLININET · CVSS 9 · 2026-03-02 | 9.0 | 0.1% | 2026-03-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.