Reliance on IP Address for Authentication
CWE-291
The product uses an IP address for authentication.
We track 8 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.6.
How this weakness is prevented
- Architecture and Design: Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate. While IP address verification can be a useful part of an authentication scheme, but it should not be the single factor required for authentication.
Latest Reliance on IP Address for Authentication vulnerabilities
- 8.8 High severity
SonicOS: Reliance on IP Address for Authentication
A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially enable a remote unauthenticated attacker to perform unauthorized operations.
- 7.4 High severity
OpenClaw: Reliance on IP Address for Authentication
OpenClaw Canvas Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of OpenClaw. Authentication is not required to exploit this vulnerability. The specific flaw exists within the im
- 9.8 Critical severity
AC8: Improper Authentication
A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. Th
- 9.8 Critical severity
FAST/TOOLS: Reliance on IP Address for Authentication
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The web server accepts access by IP address. When a worm that randomly searches for IP addresses intrudes into the network, it could potentially be attacked by the worm. Th
- 7.7 High severity
Access Manager 92xx-k5: Reliance on IP Address for Authentication
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authent
- 8.8 High severity
Print Virtual Appliance Host: Reliance on IP Address for Authentication
Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to
- 8.1 High severity
WBR-6012: Reliance on IP Address for Authentication
The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due to reliance on client IP addresses for authentication. Attackers could spoof an IP address to gain unauthorized access without needing a se
- 8.1 High severity
Router: Improper Authentication
A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be init