access:pre-auth 类型相关 24639 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-33874 | FortiTester 操作系统命令注入漏洞 — Fortinet FortiTester | 9.8 | Critical | 2022-10-10 |
| CVE-2022-35846 | FortiTester 安全漏洞 — Fortinet FortiTester | 8.1 | High | 2022-10-10 |
| CVE-2022-37885 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points; 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37886 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37887 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37889 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37890 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37891 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-07 |
| CVE-2022-37892 | Aruba Networks ArubaOS 跨站脚本漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 6.1 | - | 2022-10-07 |
| CVE-2022-37894 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 6.5 | - | 2022-10-07 |
| CVE-2022-37895 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 6.5 | - | 2022-10-07 |
| CVE-2022-37888 | Aruba Networks ArubaOS 安全漏洞 — Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; | 9.8 | - | 2022-10-06 |
| CVE-2022-40895 | Nedi Consulting Nedi 安全漏洞 — n/a | 9.1 | - | 2022-10-06 |
| CVE-2022-41522 | TOTOLINK NR1800X 缓冲区错误漏洞 — n/a | 9.8 | - | 2022-10-06 |
| CVE-2022-3124 | WordPress plugin Frontend File Manager 安全漏洞 — Frontend File Manager Plugin CWE-862 | 5.3 | - | 2022-10-03 |
| CVE-2022-2839 | WordPress plugin Zephyr Project Manager 跨站脚本漏洞 — Zephyr Project Manager CWE-79 | 6.1 | - | 2022-10-03 |
| CVE-2022-20945 | Cisco Catalyst 输入验证错误漏洞 — Cisco Aironet Access Point Software (IOS XE Controller) CWE-120 | 7.4 | High | 2022-09-30 |
| CVE-2022-20919 | Cisco IOS和Cisco IOS XE Software 输入验证错误漏洞 — Cisco IOS CWE-248 | 8.6 | High | 2022-09-30 |
| CVE-2022-20856 | Cisco IOS XE Wireless Controller software 安全漏洞 — Cisco IOS XE Software CWE-664 | 8.6 | High | 2022-09-30 |
| CVE-2022-20848 | Cisco Catalyst 资源管理错误漏洞 — Cisco IOS XE Software CWE-399 | 8.6 | High | 2022-09-30 |
| CVE-2022-20847 | 多款Cisco产品 资源管理错误漏洞 — Cisco IOS XE Software CWE-399 | 8.6 | High | 2022-09-30 |
| CVE-2022-20844 | Cisco vManage 信任管理问题漏洞 — Cisco SD-WAN vManage CWE-798 | 5.3 | Medium | 2022-09-30 |
| CVE-2022-20769 | Cisco Wireless LAN Controller 缓冲区错误漏洞 — Cisco Wireless LAN Controller (WLC) CWE-787 | 7.4 | High | 2022-09-30 |
| CVE-2022-20728 | Cisco Access Points 安全漏洞 — Cisco Aironet Access Point Software (IOS XE Controller) CWE-284 | 4.7 | Medium | 2022-09-30 |
| CVE-2022-20662 | Cisco Duo 授权问题漏洞 — Cisco Duo CWE-287 | 6.1 | Medium | 2022-09-30 |
| CVE-2022-34394 | Dell SmartFabric OS10 信任管理问题漏洞 — Dell Networking OS10 CWE-295 | 3.7 | Low | 2022-09-28 |
| CVE-2022-29089 | Dell SmartFabric OS10 信息泄露漏洞 — Dell Networking OS10 CWE-522 | 6.4 | Medium | 2022-09-28 |
| CVE-2022-28812 | Carlo Gavazzi UWP 信任管理问题漏洞 — UWP 3.0 Monitoring Gateway and Controller CWE-798 | 9.8 | Critical | 2022-09-28 |
| CVE-2022-28811 | Carlo Gavazzi UWP 操作系统命令注入漏洞 — UWP 3.0 Monitoring Gateway and Controller CWE-78 | 9.8 | Critical | 2022-09-28 |
| CVE-2022-22524 | Carlo Gavazzi UWP SQL注入漏洞 — UWP 3.0 Monitoring Gateway and Controller CWE-89 | 9.4 | Critical | 2022-09-28 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24639 条 CVE 漏洞。