Advisories · Weakness
CWE-603.
Every Advisory and CVE whose sources give the weakness CWE-603, newest first.
- CVSS 8.6 High
Use of Client-Side Authentication in Płatnik
- Zakład Ubezpieczeń Społecznych Płatnik
- CWE-603
- CVSS 8.2 High
OTP Code Exposure in Hayat Hospital's Hayat Mobile
- Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile
- CWE-603
- CVSS 4.7 Medium
Reverse Tabnabbing via New Tab Navigation in Multiple WSO2 Products Allows Phishing and Credential Theft
- WSO2 API Control Plane
- WSO2 API Manager
- CWE-20
- CWE-603
- CVSS 7.1 High
Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- CWE-603
- CVSS 8.7 High
Ebyte NE2-D11 Use of Client-Side Authentication
- Ebyte NE2-D11 Firmware
- CWE-603
- CVSS 9.3 CriticalCritical · CVSS 9+
Ebyte NA111-M Use of Client-Side Authentication
- Ebyte NA111-M Firmware
- CWE-603
- CVSS 8.7 High
Authorization Bypass in Sparx Enterprise Architect
- Sparx Systems Enterprise Architect
- CWE-603
- CVSS 4.3 Medium
Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation
- CWE-603
<26.6.3 · fixed in 26.6.3
GHSA-g8vr-x4qh-25qg · CVE-2026-8830 - CVSS 8.4 High
Use of Client-Side Authentication in multiple BinSoft products
- BinSoft mpGabinet
- BinSoft mpFirma
- CWE-603
- CVSS 9.0 CriticalCritical · CVSS 9+
Session generation possible with certificate number only
- CGM CLININET
- CWE-603
- CVSS 9.3 CriticalCritical · CVSS 9+
JNC|IAQS and I6 - Client-Side Enforcement of Server-Side Security
- JNC IAQS
- JNC I6
- CWE-603
- CVSS 9.3 CriticalCritical · CVSS 9+
Nuvation Energy BMS Client-side Authentication
- Nuvation Energy Battery Management System
- CWE-603
- CVSS 8.7 High
Mirion Medical EC2 Software NMIS BioDose Use of Client-Side Authentication
- Mirion Medical EC2 Software NMIS BioDose
- CWE-603
- CVSS 9.3 CriticalCritical · CVSS 9+
CyberTutor|New Site Server - Use of Client-Side Authentication
- CyberTutor New Site Server
- CWE-603
- CVSS 8.3 High
Restaurant Brands International assistant platform: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on…
- Restaurant Brands International assistant platform
- CWE-603
- CVSS 5.8 Medium
Restaurant Brands International assistant platform: The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on…
- Restaurant Brands International assistant platform
- CWE-603
- CVSS 7.5 High
Use of client-side authentication issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions.
- Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
- CWE-603
- CVSS 6.0 Medium
ECOVACS lawnmower and vacuum cloud service live video PIN bypass
- ECOVACS HOME
- ECOVACS cloud service
- CWE-603
- CWE-807
- CVSS 7.5 High
MUSASI version 3 contains an issue with use of client-side authentication.
- NEUMANN CO.LTD. MUSASI
- CWE-603
- CVSS 9.3 CriticalCritical · CVSS 9+
Use of Client-Side Authentication in TELSAT marKoni FM Transmitter
- Markoni-D (Compact) FM Transmitters
- Markoni-DH (Exciter+Amplifiers) FM Transmitters
- CWE-603
- CVSS 7.5 High
An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file.
- Broken access control
- CWE-603
-
Necta WiFi Mouse (Mouse Server) client-side authentication bypass
- Necta LLC WiFi Mouse (Mouse Server)
- CWE-603
-
Siemens Cerberus DMS: A vulnerability has been identified in Cerberus DMS (All versions)…
- Siemens Cerberus DMS
- Siemens Desigo CC
- CWE-603
- CVSS 7.3 High
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
- Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)
- CWE-603
-
SOOIL Developments Co., Ltd Diabecare RS…: In SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A…
- SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A
- CWE-603
-
A vulnerability has been identified in SIPORT MP (All versions < 3.2.1).
- Siemens SIPORT MP
- CWE-603
- CVSS 7.5 High
Rockwell Automation MicroLogix 1400 Controllers Series B…: Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A…
- Rockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all versions, MicroLogix 1100 Controller, all versions, RSLogix 500 Software v12.001 and prior
- CWE-603
-
Advantech B+B SmartWorx MESR901: A Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx…
- Advantech B+B SmartWorx MESR901
- CWE-603