CWE-291 Reliance on IP Address for Authentication
variantThe product uses an IP address for authentication.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (14)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-66602US | critical9.8 | — | ||
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.
The web server accepts
access by IP address. When a worm that randomly searches for IP ad… | ||||
| CVE-2025-34202US | high8.8 | — | ||
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way… | ||||
| CVE-2024-23309US | high8.1 | — | ||
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Atta… | ||||
| CVE-2023-7211US | high8.1 | — | ||
A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipul… | ||||
| CVE-2023-35906US | high7.5OT elevated | — | ||
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649. | ||||
| CVE-2000-0533US | high7.2 | — | ||
Vulnerability in cvconnect in SGI IRIX WorkShop allows local users to overwrite arbitrary files. | ||||
| CVE-2022-46415US | medium5.9 | — | ||
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool. To accomplish this, the attacker would first need to… | ||||
| CVE-2022-27152US | medium5.7 | — | ||
Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification. | ||||
| CVE-2026-4252US | — | — | ||
A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on i… | ||||
| CVE-2026-86485US | — | — | ||
In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks | ||||
| CVE-2026-3690US | — | — | ||
OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is no… | ||||
| CVE-2025-59101US | — | — | ||
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication requ… | ||||
| CVE-2024-32765US | —OT elevated | — | ||
A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute c… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan