access:pre-auth 类型相关 24368 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-17286 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 | 7.5 | - | 2018-02-15 |
| CVE-2017-17287 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 | 7.5 | - | 2018-02-15 |
| CVE-2017-17288 | 多款Huawei产品数字错误漏洞 — DP300,RP200,TE30,TE40,TE50,TE60 | 5.3 | - | 2018-02-15 |
| CVE-2017-17290 | Huawei TE60和ViewPoint 9030 Light Directory Access Protocol客户端资源管理错误漏洞 — TE60,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-17295 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 | 7.5 | - | 2018-02-15 |
| CVE-2017-17296 | 多款Huawei产品安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 | 7.5 | - | 2018-02-15 |
| CVE-2017-17297 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,IPSModule,NGFWModule,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,SeMG9811,SecospaceUSG6300,SecospaceUSG6500,SecospaceUSG6600,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint9030,eSpaceU1981 | 7.5 | - | 2018-02-15 |
| CVE-2017-17298 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,DP300,NetEngine16EX,RP200,SRG1300,SRG2300,SRG3300,TE30,TE40,TE50,TE60,TP3106,TP3206,ViewPoint9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-17299 | 多款Huawei产品输入验证漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,IPS Module,NIP6300,NetEngine16EX | 7.5 | - | 2018-02-15 |
| CVE-2017-17300 | 多款Huawei产品安全漏洞 — S12700,S5700,S6700,S7700,S9700 | - | - | 2018-02-15 |
| CVE-2017-17301 | 多款Huawei产品安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,CloudEngine 12800,CloudEngine 5800,CloudEngine 6800,CloudEngine 7800,DP300,SMC2.0,SRG1300,SRG2300,SRG3300,TE30,TE60,VP9660,ViewPoint 8660,eSpace IAD,eSpace U1981,eSpace USM | 7.5 | - | 2018-02-15 |
| CVE-2018-2369 | SAP HANA 信息泄露漏洞 — SAP HANA | 7.5 | - | 2018-02-14 |
| CVE-2018-2373 | SAP HANA Extended Application Services 信息泄露漏洞 — SAP HANA Extended Application Services | 7.5 | - | 2018-02-14 |
| CVE-2018-2379 | SAP HANA Extended Application Services 访问控制错误漏洞 — SAP HANA Extended Application Services | 7.5 | - | 2018-02-14 |
| CVE-2018-2394 | SAP Internet Graphics Server 权限许可和访问控制问题漏洞 — SAP Internet Graphics Server | 6.5 | - | 2018-02-14 |
| CVE-2018-5459 | WAGO PFC200 Series 3S CoDeSys Runtime 授权问题漏洞 — WAGO PFC200 Series CWE-287 | 9.8 | - | 2018-02-13 |
| CVE-2018-6892 | CloudMe 缓冲区错误漏洞 — n/a | 9.8 | - | 2018-02-11 |
| CVE-2018-1298 | Apache Qpid 安全漏洞 — Apache Qpid Broker-J | 5.9 | - | 2018-02-09 |
| CVE-2018-6180 | Online Voting System 安全漏洞 — n/a | 9.1 | - | 2018-02-08 |
| CVE-2018-0116 | Cisco Policy Suite RADIUS authentication模块安全漏洞 — Cisco Policy Suite CWE-287 | 6.5 | - | 2018-02-08 |
| CVE-2018-0117 | Cisco Virtualized Packet Core-Distributed Instance Software Cisco StarOS操作系统安全漏洞 — Cisco Virtualized Packet Core-Distributed Instance CWE-20 | 8.6 | - | 2018-02-08 |
| CVE-2018-0125 | Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers 输入验证错误漏洞 — Cisco RV132W and RV134W CWE-20 | 9.8 | - | 2018-02-08 |
| CVE-2018-0127 | Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers Web界面信息泄露漏洞 — Cisco RV132W and RV134W Wireless VPN Routers CWE-200 | 7.5 | - | 2018-02-08 |
| CVE-2018-0128 | Cisco Data Center Analytics Framework 跨站脚本漏洞 — Cisco Data Center Analytics Framework CWE-79 | 6.1 | - | 2018-02-08 |
| CVE-2018-0129 | Cisco Data Center Analytics Framework 跨站脚本漏洞 — Cisco Data Center Analytics Framework CWE-79 | 6.1 | - | 2018-02-08 |
| CVE-2018-0132 | Cisco IOS XR Software 安全漏洞 — Cisco IOS XR CWE-119 | 6.8 | - | 2018-02-08 |
| CVE-2018-0134 | Cisco Policy Suite RADIUS身份验证模块信息泄露漏洞 — Cisco Policy Suite CWE-200 | 5.3 | - | 2018-02-08 |
| CVE-2018-0137 | Cisco Prime Network 安全漏洞 — Cisco Prime Network CWE-399 | 7.5 | - | 2018-02-08 |
| CVE-2018-0138 | Cisco Firepower System Software detection引擎安全漏洞 — Cisco Firepower System Software CWE-693 | 5.3 | - | 2018-02-08 |
| CVE-2018-1299 | Apache Allura 安全漏洞 — Apache Allura | 7.5 | - | 2018-02-06 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24368 条 CVE 漏洞。