CWE-656 · Misconfiguration and Insecure Design
Reliance on Security Through Obscurity
10CVEs
SortMost likely exploited
10 CVEs with CWE-656 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-10284RVD#3321: No Authentication required to exert manual control of the robotuFactory · xArm5 Lite, xArm 6 and xArm 7 · CVSS 9.1 · 2020-07-15 | 9.1 | 1.4% | 2020-07-15 |
| CVE-2024-9138Privilege Escalation in Cellular Router, Secure Router, and Network Security AppliancesMoxa · EDR-810 Series · CVSS 7.2 · 2025-01-03 | 7.2 | 1.1% | 2025-01-03 |
| CVE-2024-12297Frontend Authorization Logic Disclosure VulnerabilityMoxa · EDS-508A Series · CVSS 9.2 · 2025-01-15 | 9.2 | 0.8% | 2025-01-15 |
| CVE-2020-10286RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoSuFactory · xArm 5 Lite, xArm 6 and xArm 7 · CVSS 9.4 · 2020-07-15 | 9.4 | 0.7% | 2020-07-15 |
| CVE-2024-5244TP-Link Omada ER605 Reliance on Security Through Obscurity VulnerabilityTP-Link · Omada ER605 · CVSS 5 · 2024-05-23 | 5.0 | 0.4% | 2024-05-23 |
| CVE-2020-10277RVD#2562: Booting from a live image leads to exfiltration of sensible information and privilege escalationMobile Industrial Robots A/S · MiR100 · CVSS 6.4 · 2020-06-24 | 6.4 | 0.4% | 2020-06-24 |
| CVE-2026-7161GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerabilityGeoVision Inc. · GV-IP Device Utility · CVSS 9.3 · 2026-05-04 | 9.3 | 0.2% | 2026-05-04 |
| CVE-2026-42363GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerabilityGeoVision Inc. · GV-IP Device Utility · CVSS 9.3 · 2026-04-26 | 9.3 | 0.2% | 2026-04-26 |
| CVE-2025-59093Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300dormakaba · Kaba exos 9300 · CVSS 8.5 · 2026-01-26 | 8.5 | 0.2% | 2026-01-26 |
| CVE-2025-7020BYD DiLink OS Incorrect encryption Implementation of system log dumpsBYD · DiLink OS · CVSS 5.1 · 2025-08-09 | 5.1 | 0.2% | 2025-08-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.