Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-306 (关键功能的认证机制缺失) — Vulnerability Class 1096

1096 vulnerabilities classified as CWE-306 (关键功能的认证机制缺失). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2020-3402 Cisco Unified Customer Voice Portal Information Disclosure Vulnerability — Cisco Unified IP Interactive Voice Response (IVR) 7.5 -2020-07-02
CVE-2020-10272 RVD#2554: MiR ROS computational graph presents no authentication mechanisms — MiR100 8.8 -2020-06-24
CVE-2020-7589 Siemens LOGO!8 BM 访问控制错误漏洞 — LOGO! 8 BM (incl. SIPLUS variants) 9.1 -2020-06-10
CVE-2020-12004 Inductive Automation Ignition 访问控制错误漏洞 — Ignition 8 Gateway 7.5 -2020-06-09
CVE-2020-5589 多款SONY无线耳机访问控制错误漏洞 — Sony wireless headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N, WI-SP600N 8.8 -2020-06-09
CVE-2020-3335 Cisco Application Services Engine Software Authorization Vulnerability — Cisco Application Policy Infrastructure Controller (APIC) 5.5 -2020-06-03
CVE-2020-3333 Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability — Cisco Application Policy Infrastructure Controller (APIC) 5.3 -2020-06-03
CVE-2020-12017 多款GE产品访问控制错误漏洞 — GE Grid Solutions Reason RT Clocks 9.8 -2020-06-02
CVE-2019-5620 ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function — MicroSCADA Pro SYS600 9.8 -2020-04-29
CVE-2020-10625 Advantech WebAccess/NMS 访问控制错误漏洞 — WebAccess/NMS 9.8 -2020-04-09
CVE-2020-10265 RVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions — Universal Robots Robot Controllers CB 2, CB3, e-series 9.8 -2020-04-06
CVE-2020-7479 Schneider Electric Interactive Graphical SCADA System 访问控制错误漏洞 — IGSS (Interactive Graphical SCADA System) (IGSS Version prior to 14.0.0.20009) 7.8 -2020-03-23
CVE-2020-5328 Dell EMC Isilon OneFS 访问控制错误漏洞 — Isilon OneFS 9.8 Critical2020-03-06
CVE-2020-5326 Dell Client platforms 访问控制错误漏洞 — Dell Client Consumer and Commercial Platforms 6.1 Medium2020-02-21
CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway — DIVAR IP 2000 10.0 Critical2020-02-07
CVE-2019-16003 Cisco UCS Director Information Disclosure Vulnerability — Cisco UCS Director 5.3 -2020-01-26
CVE-2020-6964 多款GE产品访问控制错误漏洞 — GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center systems,CARESCAPE B450,B650,B850 Monitors 10.0 -2020-01-24
CVE-2019-13933 Siemens Scalance X-200系列和Scalance X-300系列访问控制错误漏洞 — SCALANCE X204RNA (HSR) 7.5 -2020-01-16
CVE-2019-18572 Dell RSA Identity Governance and Lifecycle和RSA Via Lifecycle and Governance 授权问题漏洞 — RSA Identity Governance & Lifecycle 9.8 -2019-12-18
CVE-2019-5152 Shadowsocks-libev 访问控制错误漏洞 — Shadowsocks 5.9 -2019-12-18
CVE-2019-18339 Siemens SiNVR 3 Central Control Server 访问控制错误漏洞 — SiNVR/SiVMS Video Server 9.8 Critical2019-12-12
CVE-2019-5164 Shadowsocks-libev 访问控制错误漏洞 — Shadowsocks 7.8 -2019-12-03
CVE-2019-5163 Shadowsocks-libev 访问控制错误漏洞 — Shadowsocks 7.5 -2019-12-03
CVE-2019-18230 Honeywell equIP系列和Performance系列IP摄像头访问控制错误漏洞 — Honeywell equIP & Performance series IP cameras 7.5 -2019-10-31
CVE-2019-3978 MikroTik RouterOS 访问控制错误漏洞 — MikroTik RouterOS 7.5 -2019-10-28
CVE-2019-13525 Honeywell IP-AK2 访问控制错误漏洞 — Honeywell IP-AK2 5.3 -2019-10-25
CVE-2019-13549 Rittal Chiller SK 3232-Series 访问控制错误漏洞 — Rittal Chiller SK 3232-Series 7.5 -2019-10-25
CVE-2019-15282 Cisco Identity Services Engine Information Disclosure Vulnerability — Cisco Identity Services Engine Software 5.3 -2019-10-16
CVE-2019-1895 Cisco Enterprise NFV Infrastructure Software VNC Authentication Bypass Vulnerability — Cisco Enterprise NFV Infrastructure Software 9.8 -2019-08-07
CVE-2015-7559 Apache ActiveMQ 输入验证错误漏洞 — ActiveMQ 4.9 -2019-08-01

Vulnerabilities classified as CWE-306 (关键功能的认证机制缺失) represent 1096 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.