access:pre-auth 类型相关 24211 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-6045 | Trihedral VTScada 信息泄露漏洞 — Trihedral VTScada CWE-548 | 7.5 | - | 2017-06-21 |
| CVE-2017-6050 | Ecava IntegraXor SQL注入漏洞 — Ecava IntegraXor CWE-89 | 9.8 | - | 2017-06-21 |
| CVE-2017-9781 | Mathias Kettner Check_MK 跨站脚本漏洞 — n/a | 6.1 | - | 2017-06-21 |
| CVE-2017-3216 | 多款WiMAX路由器安全漏洞 — BM2022 CWE-306 | 9.8 | - | 2017-06-20 |
| CVE-2017-4984 | EMC VNX2 OE for File和VNX1 OE for File 安全漏洞 — EMC VNX2 versions prior to OE for File 8.1.9.211, EMC VNX1 versions prior to OE for File 7.1.80.8 | 9.8 | - | 2017-06-19 |
| CVE-2017-9602 | KBVault Mysql Free Knowledge Base 权限许可和访问控制问题漏洞 — n/a | 9.8 | - | 2017-06-16 |
| CVE-2017-9675 | D-Link DIR-605L 安全漏洞 — n/a | 7.5 | - | 2017-06-15 |
| CVE-2017-8515 | Microsoft Windows 安全漏洞 — Microsoft Windows | 6.2 | - | 2017-06-15 |
| CVE-2016-8218 | Pivotal Software Cloud Foundry 输入验证漏洞 — Cloud Foundry | 9.1 | - | 2017-06-13 |
| CVE-2017-2773 | Pivotal Cloud Foundry Elastic Runtime 安全漏洞 — PCF Elastic Runtime | 9.8 | - | 2017-06-13 |
| CVE-2017-6655 | Cisco NX-OS Software 安全漏洞 — Cisco NX-OS Software Fibre Channel over Ethernet | 5.3 | - | 2017-06-13 |
| CVE-2017-6656 | Cisco IP Phone 8800 Series 安全漏洞 — Cisco IP Phone 8800 Series | 5.9 | - | 2017-06-13 |
| CVE-2017-6659 | Cisco Prime Collaboration Assurance 跨站请求伪造漏洞 — Cisco Prime Collaboration Assurance | 8.8 | - | 2017-06-13 |
| CVE-2017-6661 | Cisco Email Security和Content Security Management Appliance 跨站脚本漏洞 — Cisco Email Security and Content Security Management Appliance | 6.1 | - | 2017-06-13 |
| CVE-2017-6667 | Cisco Context Service SDK 输入验证漏洞 — Cisco Context Service SDK | 9.8 | - | 2017-06-13 |
| CVE-2017-6670 | Cisco Unified Communications Domain Manager 安全漏洞 — Cisco Unified Communications Domain Manager | 6.1 | - | 2017-06-13 |
| CVE-2017-6671 | Cisco Email Security Appliance AsyncOS Software 输入验证漏洞 — Cisco Email Security Appliance | 7.5 | - | 2017-06-13 |
| CVE-2017-6674 | Cisco Firepower System Software 安全漏洞 — Cisco Firepower System Software | 7.5 | - | 2017-06-13 |
| CVE-2017-6675 | Cisco Industrial Network Director 跨站脚本漏洞 — Cisco Industrial Network Director | 6.1 | - | 2017-06-13 |
| CVE-2017-6680 | Cisco Ultra Services Framework 安全漏洞 — Cisco Ultra Services Framework | 7.5 | - | 2017-06-13 |
| CVE-2017-6681 | Cisco Ultra Services Framework 信息泄露漏洞 — Cisco Ultra Services Framework | 7.5 | - | 2017-06-13 |
| CVE-2017-6639 | Cisco Prime Data Center Network Manager for Microsoft Windows、Linux和Virtual Appliance平台安全漏洞 — Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability CWE-16 | 9.8 | - | 2017-06-08 |
| CVE-2017-6640 | Cisco Prime Data Center Network Manager 安全漏洞 — Cisco Prime Data Center Network Manager Server Static Credential Vulnerability CWE-264 | 9.8 | - | 2017-06-08 |
| CVE-2017-6648 | Cisco TelePresence Codec和Collaboration Endpoint软件资源管理错误漏洞 — Cisco TelePresence Endpoint Denial of Service Vulnerability CWE-399 | 7.5 | - | 2017-06-08 |
| CVE-2017-2311 | Juniper Networks Junos Space 安全漏洞 — Junos Space | 5.3 | - | 2017-05-30 |
| CVE-2017-9294 | Hitachi Device Manager 安全漏洞 — n/a | 9.8 | - | 2017-05-29 |
| CVE-2017-9148 | FreeRADIUS 安全漏洞 — n/a | 9.1 | - | 2017-05-29 |
| CVE-2016-4435 | BOSH Director VM 安全漏洞 — Cloud Foundry | 8.1 | - | 2017-05-25 |
| CVE-2017-6630 | Cisco IP Phone 8851 安全漏洞 — Cisco IP Phone 8851 CWE-399 | 7.5 | - | 2017-05-22 |
| CVE-2017-6632 | Cisco FirePOWER System Software 安全漏洞 — Cisco FirePOWER System Software CWE-399 | 7.5 | - | 2017-05-22 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24211 条 CVE 漏洞。