access:pre-auth 类型相关 26509 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2018-7300 | eQ-3 AG Homematic CCU2 路径遍历漏洞 — n/a | 9.8 | - | 2018-02-22 |
| CVE-2018-7301 | eQ-3 AG HomeMatic CCU2 安全漏洞 — n/a | 9.8 | - | 2018-02-22 |
| CVE-2018-0121 | Cisco Elastic Services Controller Software 安全漏洞 — Cisco Elastic Services Controller CWE-287 | 9.8 | - | 2018-02-22 |
| CVE-2018-0124 | Cisco Unified Communications Domain Manager 加密问题漏洞 — Cisco Unified Communications Domain Manager CWE-320 | 9.8 | - | 2018-02-22 |
| CVE-2018-0130 | Cisco Elastic Services Controller Software 安全漏洞 — Cisco Elastic Services Controller CWE-264 | 9.8 | - | 2018-02-22 |
| CVE-2018-0139 | Cisco Unified Customer Voice Portal Interactive Voice Response管理连接界面安全漏洞 — Cisco Unified Customer Voice Portal CWE-20 | 8.6 | - | 2018-02-22 |
| CVE-2018-0145 | Cisco Data Center Analytics Framework应用程序跨站脚本漏洞 — Cisco Data Center Analytics Framework CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0146 | Cisco Data Center Analytics Framework应用程序跨站请求伪造漏洞 — Cisco Data Center Analytics Framework CWE-352 | 8.1 | - | 2018-02-22 |
| CVE-2018-0148 | Cisco UCS Director Software和Cisco Integrated Management Controller Supervisor Software 跨站请求伪造漏洞 — Cisco UCS Director and Cisco Integrated Management Controller Supervisor CWE-352 | 8.8 | - | 2018-02-22 |
| CVE-2018-0199 | Cisco Jabber Client Framework 跨站脚本漏洞 — Cisco Jabber Client Framework CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0200 | Cisco Prime Service Catalog 跨站脚本漏洞 — Cisco Prime Service Catalog CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0203 | Cisco Unity Connection SMTP relay 安全漏洞 — Cisco Unity Connection CWE-19 | 5.3 | - | 2018-02-22 |
| CVE-2018-0204 | Cisco Prime Collaboration Provisioning Tool Web portal 安全漏洞 — Cisco Prime Collaboration Provisioning Tool CWE-119 | 5.3 | - | 2018-02-22 |
| CVE-2018-0205 | Cisco Prime Collaboration Provisioning Tool User Provisioning tab 跨站脚本漏洞 — Cisco Prime Collaboration Provisioning Tool CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-0206 | Cisco Unified Communications Manager 跨站脚本漏洞 — Cisco Unified Communications Manager CWE-79 | 6.1 | - | 2018-02-22 |
| CVE-2018-1164 | ZyXEL P-870H-51 DSL Router 安全漏洞 — ZyXEL P-870H-51 DSL Router CWE-306 | 9.8 | - | 2018-02-21 |
| CVE-2015-2081 | Datto ALTO和SIRIS devices 输入验证漏洞 — n/a | 9.8 | - | 2018-02-20 |
| CVE-2017-17101 | Apexis APM-H803-MPC 权限许可和访问控制问题漏洞 — n/a | 9.8 | - | 2018-02-19 |
| CVE-2018-7197 | Pluck 跨站脚本漏洞 — n/a | 6.1 | - | 2018-02-18 |
| CVE-2018-3609 | Trend Micro InterScan Messaging Security Virtual Appliance 安全漏洞 — Trend Micro InterScan Messaging Security Virtual Appliance CWE-522 | 8.1 | - | 2018-02-16 |
| CVE-2018-5767 | Tenda AC15 输入验证漏洞 — n/a | 9.8 | - | 2018-02-15 |
| CVE-2017-5797 | HP Intelligent Management Center 信息泄露漏洞 — Intelligent Management Center (IMC) | 7.5 | - | 2018-02-15 |
| CVE-2017-5813 | HP Network Automation 安全漏洞 — Network Automation | 8.3 | - | 2018-02-15 |
| CVE-2017-5824 | HPE Aruba ClearPass Policy Manager 安全漏洞 — Aruba ClearPass Policy Manager | 9.8 | - | 2018-02-15 |
| CVE-2017-8970 | HPE Matrix Operating Environment for Windows 信息泄露漏洞 — Matrix Operating Environment | 5.3 | - | 2018-02-15 |
| CVE-2017-15331 | 多款Huawei产品缓冲区错误漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-15332 | 多款Huawei产品H323协议安全漏洞 — AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR510,DP300,IPS Module,MAX PRESENCE,NGFW Module,NIP6300,NIP6600,NIP6800,NetEngine16EX,RP200,RSE6500,SMC2.0,SRG1300,SRG2300,SRG3300,SVN5600,SVN5800,SVN5800-C,Secospace USG6300,Secospace USG6500,TE30,TE40,TE50,TE60,TP3106,TP3206,USG9500,USG9520,USG9560,USG9580,ViewPoint 9030 | 7.5 | - | 2018-02-15 |
| CVE-2017-15341 | 多款Huawei产品安全漏洞 — AR3200,TE40,TE50,TE60 | 7.5 | - | 2018-02-15 |
| CVE-2017-15342 | 多款Huawei产品安全漏洞 — DP300,TE60,TP3106,eSpace U1981 | 7.5 | - | 2018-02-15 |
| CVE-2017-15343 | Huawei AR3200 数字错误漏洞 — AR3200 | 7.5 | - | 2018-02-15 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 26509 条 CVE 漏洞。