CWE-603 · 27 records

Use of Client-Side Authentication

CVEs in this class

27 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
61This week	CVE-2022-3218Weaponized	Necta WiFi Mouse (Mouse Server) client-side authentication bypassnecta · wifi mouse server · CWE-603 pre-auth RCE Auth bypass	Critical9.8	—	74.1%	Sep 19, 2022
40Plan	CVE-2017-7909No exploit	A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior.advantech b\+b smartworx · mesr901 firmware · CWE-603 Pre-auth Auth bypass	Critical9.8	—	2.6%	May 5, 2017
39Monitor	CVE-2022-33139No exploit	A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinCsiemens · cerberus dms · CWE-603 Pre-auth	Critical9.8	—	1.2%	Jun 21, 2022
39Monitor	CVE-2021-43355No exploit	Fresenius Kabi Agilia Connect Infusion System use of client side authenticationfresenius-kabi · agilia partner maintenance software · CWE-603 Pre-auth Auth bypass	Critical9.8	—	0.9%	Jan 21, 2022
39Monitor	CVE-2025-62650No exploit	The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnostrbi · restaurant brands international assistant · CWE-603 Pre-auth	Critical9.9	—	0.5%	Oct 17, 2025
37Monitor	CVE-2026-71187No exploit	Ebyte NA111-M Use of Client-Side Authenticationebyte · ebyte na111-m firmware · CWE-603 Pre-auth Auth bypass	Critical9.3	—	0.7%	Aug 27, 2026
37Monitor	CVE-2026-1363No exploit	JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Securityjnc · iaqs · CWE-603 Pre-auth	Critical9.3	—	0.5%	Jan 23, 2026
37Monitor	CVE-2024-39375No exploit	Use of Client-Side Authentication in TELSAT marKoni FM Transmittermarkoni · markoni-d \(compact\) firmware · CWE-603 Pre-auth Auth bypass	Critical9.3	—	0.5%	Jun 27, 2024
37Monitor	CVE-2025-12868No exploit	CyberTutor｜New Site Server - Use of Client-Side Authenticationcybertutor · new site server · CWE-603 Pre-auth	Critical9.3	—	0.5%	Nov 10, 2025
37Monitor	CVE-2025-64119No exploit	Nuvation Energy BMS Client-side Authenticationnuvation energy · battery management system · CWE-603 Pre-auth Auth bypass	Critical9.3	—	0.4%	Jan 2, 2026
36Monitor	CVE-2025-30042No exploit	Session generation possible with certificate number onlycgm · clininet · CWE-603 Pre-auth	Critical9.0	—	0.0%	Mar 2, 2026
35Monitor	CVE-2020-7591No exploit	A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).siemens · siport mp · CWE-603	High8.8	—	1.4%	Oct 15, 2020
34Monitor	CVE-2026-76945No exploit	Ebyte NE2-D11 Use of Client-Side Authenticationebyte · ebyte ne2-d11 firmware · CWE-603 Pre-auth	High8.7	—	0.5%	Aug 27, 2026
34Monitor	CVE-2026-42098No exploit	Authorization Bypass in Sparx Enterprise Architectsparx systems · enterprise architect · CWE-603	High8.7	—	0.4%	May 19, 2026
34Monitor	CVE-2025-61940No exploit	Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authenticationmirion · biodose\/nmis · CWE-603	High8.7	—	0.3%	Dec 2, 2025
34Monitor	CVE-2026-110972No exploit	Use of Client-Side Authentication in Płatnikzakład ubezpieczeń społecznych · płatnik · CWE-603	High8.6	—	0.2%	Oct 30, 2026
33Monitor	CVE-2026-40551No exploit	Use of Client-Side Authentication in multiple BinSoft productsbinsoft · mpgabinet · CWE-603	High8.4	—	0.1%	Apr 28, 2026
32Monitor	CVE-2020-6988No exploit	Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versionsrockwellautomation · micrologix 1400 a firmware · CWE-603 Pre-auth Auth bypass	High7.5	—	5.4%	Mar 16, 2020
32Monitor	CVE-2026-90983No exploit	OTP Code Exposure in Hayat Hospital's Hayat Mobilehayat health facilities inc. (hayat hospital) · hayat mobile · CWE-603 Pre-auth Auth bypass	High8.2	—	0.2%	Oct 9, 2026
30Monitor	CVE-2025-24517No exploit	Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions.inaba denki sangyo co., ltd. · choco tei watcher mini (ib-mct001) · CWE-603 Pre-auth Auth bypass	High7.5	—	0.8%	Mar 31, 2025
30Monitor	CVE-2024-28627No exploit	An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.CWE-603 Pre-auth	High7.5	—	0.4%	Apr 23, 2024
30Monitor	CVE-2024-45785No exploit	MUSASI version 3 contains an issue with use of client-side authentication.neumann · musasi · CWE-603 Pre-auth	High7.5	—	0.4%	Oct 25, 2024
28Monitor	CVE-2026-66305No exploit	Skype for Business Spoofing Vulnerabilitymicrosoft · skype for business server · CWE-603	High7.1	—	0.5%	Sep 8, 2026
26Monitor	CVE-2020-27266No exploit	In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDansooil · anydana-a firmware · CWE-603 Pre-auth	Medium6.5	—	0.5%	Jan 19, 2021
24Monitor	CVE-2024-52327No exploit	ECOVACS lawnmower and vacuum cloud service live video PIN bypassecovacs · home · CWE-603	Medium6.0	—	0.4%	Jan 23, 2025

CVE-2022-3218
61This week
Necta WiFi Mouse (Mouse Server) client-side authentication bypass
CriticalCVSS 9.8WeaponizedEPSS 74%
- pre-auth RCE
- Auth bypass
necta · wifi mouse serverSep 19, 2022
CVE-2017-7909
40Plan
A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901 firmware versions 1.5.2 and prior.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Auth bypass
advantech b\+b smartworx · mesr901 firmwareMay 5, 2017
CVE-2022-33139
39Monitor
A vulnerability has been identified in Cerberus DMS (All versions), Desigo CC (All versions), Desigo CC Compact (All versions), SIMATIC WinC
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
siemens · cerberus dmsJun 21, 2022
CVE-2021-43355
39Monitor
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
fresenius-kabi · agilia partner maintenance softwareJan 21, 2022
CVE-2025-62650
39Monitor
The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnost
CriticalCVSS 9.9No exploitEPSS 0%
- Pre-auth
rbi · restaurant brands international assistantOct 17, 2025
CVE-2026-71187
37Monitor
Ebyte NA111-M Use of Client-Side Authentication
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
ebyte · ebyte na111-m firmwareAug 27, 2026
CVE-2026-1363
37Monitor
JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jnc · iaqsJan 23, 2026
CVE-2024-39375
37Monitor
Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
markoni · markoni-d \(compact\) firmwareJun 27, 2024
CVE-2025-12868
37Monitor
CyberTutor｜New Site Server - Use of Client-Side Authentication
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
cybertutor · new site serverNov 10, 2025
CVE-2025-64119
37Monitor
Nuvation Energy BMS Client-side Authentication
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
nuvation energy · battery management systemJan 2, 2026
CVE-2025-30042
36Monitor
Session generation possible with certificate number only
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
cgm · clininetMar 2, 2026
CVE-2020-7591
35Monitor
A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).
HighCVSS 8.8No exploitEPSS 1%
siemens · siport mpOct 15, 2020
CVE-2026-76945
34Monitor
Ebyte NE2-D11 Use of Client-Side Authentication
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
ebyte · ebyte ne2-d11 firmwareAug 27, 2026
CVE-2026-42098
34Monitor
Authorization Bypass in Sparx Enterprise Architect
HighCVSS 8.7No exploitEPSS 0%
sparx systems · enterprise architectMay 19, 2026
CVE-2025-61940
34Monitor
Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication
HighCVSS 8.7No exploitEPSS 0%
mirion · biodose\/nmisDec 2, 2025
CVE-2026-110972
34Monitor
Use of Client-Side Authentication in Płatnik
HighCVSS 8.6No exploitEPSS 0%
zakład ubezpieczeń społecznych · płatnikOct 30, 2026
CVE-2026-40551
33Monitor
Use of Client-Side Authentication in multiple BinSoft products
HighCVSS 8.4No exploitEPSS 0%
binsoft · mpgabinetApr 28, 2026
CVE-2020-6988
32Monitor
Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions
HighCVSS 7.5No exploitEPSS 5%
- Pre-auth
- Auth bypass
rockwellautomation · micrologix 1400 a firmwareMar 16, 2020
CVE-2026-90983
32Monitor
OTP Code Exposure in Hayat Hospital's Hayat Mobile
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
hayat health facilities inc. (hayat hospital) · hayat mobileOct 9, 2026
CVE-2025-24517
30Monitor
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
inaba denki sangyo co., ltd. · choco tei watcher mini (ib-mct001)Mar 31, 2025
CVE-2024-28627
30Monitor
An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
Apr 23, 2024
CVE-2024-45785
30Monitor
MUSASI version 3 contains an issue with use of client-side authentication.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
neumann · musasiOct 25, 2024
CVE-2026-66305
28Monitor
Skype for Business Spoofing Vulnerability
HighCVSS 7.1No exploitEPSS 0%
microsoft · skype for business serverSep 8, 2026
CVE-2020-27266
26Monitor
In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a client-side control vulnerability in the insulin pump and its AnyDan
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
sooil · anydana-a firmwareJan 19, 2021
CVE-2024-52327
24Monitor
ECOVACS lawnmower and vacuum cloud service live video PIN bypass
MediumCVSS 6.0No exploitEPSS 0%
ecovacs · homeJan 23, 2025

All vulnerability classes