Skip to content
OpenAdvisories

Weakness (CWE)

CWE-291: Reliance on IP Address for Authentication

Variant Incomplete

The product uses an IP address for authentication.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate. While IP address verification can be a useful part of an authentication scheme, but it should not be the single factor required for authentication.

Source: MITRE CWE-291

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-4252

    Tenda AC8 IPv6 check_is_ipv6 ip address for authentication

    A vulnerability was identified in Tenda AC8 16.03.50.11. Affected by this issue is the function check_is_ipv6 of the component IPv6 Handler. The manipulation leads to reliance on ip address for authentication. It is possible to initiate the attack remotely. T…

    Tenda AC8
  • Critical 9.0
    CVE-2024-23309

    The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application du…

    LevelOne WBR-6012
  • Critical 9.1
    CVE-2022-46415

    DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP addre…