access:pre-auth 类型相关 24371 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2018-0148 | Cisco UCS Director Software和Cisco Integrated Management Controller Supervisor Software 跨站请求伪造漏洞 — Cisco UCS Director and Cisco Integrated Management Controller Supervisor CWE-352 | 8.8 | - | 2018-02-22 |
| CVE-2018-0199 | Cisco Jabber Client Framework 跨站脚本漏洞 — Cisco Jabber Client Framework CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0200 | Cisco Prime Service Catalog 跨站脚本漏洞 — Cisco Prime Service Catalog CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0203 | Cisco Unity Connection SMTP relay 安全漏洞 — Cisco Unity Connection CWE-19 | 5.3 | - | 2018-02-22 |
| CVE-2018-0204 | Cisco Prime Collaboration Provisioning Tool Web portal 安全漏洞 — Cisco Prime Collaboration Provisioning Tool CWE-119 | 5.3 | - | 2018-02-22 |
| CVE-2018-0205 | Cisco Prime Collaboration Provisioning Tool User Provisioning tab 跨站脚本漏洞 — Cisco Prime Collaboration Provisioning Tool CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0206 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-1164 | ZyXEL P-870H-51 DSL Router 安全漏洞 — ZyXEL P-870H-51 DSL Router CWE-306 | 9.8 | - | 2018-02-21 |
| CVE-2015-2081 | Datto ALTO和SIRIS devices 输入验证漏洞 — n/a | 9.8 | - | 2018-02-20 |
| CVE-2017-17101 | Apexis APM-H803-MPC 权限许可和访问控制问题漏洞 — n/a | 9.8 | - | 2018-02-19 |
| CVE-2018-7197 | Pluck 跨站脚本漏洞 — n/a | 6.1 | - | 2018-02-18 |
| CVE-2018-3609 | Trend Micro InterScan Messaging Security Virtual Appliance 安全漏洞 — Trend Micro InterScan Messaging Security Virtual Appliance CWE-522 | 8.1 | - | 2018-02-16 |
| CVE-2018-5767 | Tenda AC15 输入验证漏洞 — n/a | 9.8 | - | 2018-02-15 |
| CVE-2017-5797 | HP Intelligent Management Center 信息泄露漏洞 — Intelligent Management Center (IMC) | 7.5 | - | 2018-02-15 |
| CVE-2017-5813 | HP Network Automation 安全漏洞 — Network Automation | 8.3 | - | 2018-02-15 |
| CVE-2017-5824 | HPE Aruba ClearPass Policy Manager 安全漏洞 — Aruba ClearPass Policy Manager | 9.8 | - | 2018-02-15 |
| CVE-2017-8970 | HPE Matrix Operating Environment for Windows 信息泄露漏洞 — Matrix Operating Environment | 5.3 | - | 2018-02-15 |
| CVE-2017-15331 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-15332 | 多款Huawei产品H323协议安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-15341 | 多款Huawei产品安全漏洞 — AR3200,TE40,TE50,TE60 | 7.5 | - | 2018-02-15 |
| CVE-2017-15342 | 多款Huawei产品安全漏洞 — DP300,TE60,TP3106,eSpace U1981 | 7.5 | - | 2018-02-15 |
| CVE-2017-15343 | Huawei AR3200 数字错误漏洞 — AR3200 | 7.5 | - | 2018-02-15 |
| CVE-2017-15344 | Huawei AR3200 缓冲区错误漏洞 — AR3200 | 7.5 | - | 2018-02-15 |
| CVE-2017-15348 | 多款Huawei产品安全漏洞 — IPS Module,NGFW Module,NIP6300,NIP6600,Secospace USG6300,Secospace USG6500,Secospace USG6600,USG9500, | 7.5 | - | 2018-02-15 |
| CVE-2017-15349 | 多款Huawei产品安全漏洞 — CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800, | 5.3 | - | 2018-02-15 |
| CVE-2017-15350 | 多款Huawei产品Common Open Policy Service Protocol模块缓冲区错误漏洞 — DP300,IPS Module,NGFW Module,NIP6300,NIP6600,NIP6800,RP200,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,Secospace USG6600,TE30,TE40,TE50,TE60,TP3206,USG9500, | 5.3 | - | 2018-02-15 |
| CVE-2017-17151 | 多款Huawei产品输入验证错误漏洞 — AR100,AR100-S,AR110-S,AR120,AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint 8660,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-17159 | Huawei MT8-EMUI4.1和NTS-AL00 安全漏洞 — MT8-EMUI4.1,NTS-AL00 | 6.5 | - | 2018-02-15 |
| CVE-2017-17160 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 | 7.5 | - | 2018-02-15 |
| CVE-2017-17165 | 多款Huawei产品缓冲区错误漏洞 — Quidway S2700,Quidway S5300,Quidway S5700,S2300,S2700,S5300,S5700,S600-E,S6300,S6700 | 7.5 | - | 2018-02-15 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24371 条 CVE 漏洞。