Skip to content
OpenAdvisories

Weakness (CWE)

CWE-294: Authentication Bypass by Capture-replay

Base Incomplete

A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).

More detail

Capture-replay attacks are common and can be difficult to defeat without cryptography. They are a subset of network injection attacks that rely on observing previously-sent valid commands, then changing them slightly if necessary and resending the same commands to the server.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Utilize some sequence or time stamping functionality along with a checksum which takes this into account in order to ensure that messages can be parsed only once.

  2. Architecture and Design

    Since any attacker who can listen to traffic can see sequence numbers, it is necessary to sign messages with some kind of cryptography to ensure that sequence numbers are not simply doctored along with content.

Source: MITRE CWE-294

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.4
    CVE-2026-73312 Public exploit

    XenForo < 2.3.13 Refresh Token Replay via Expired Access Token

    XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired. Attackers can repeatedly submit th…

    XenForo XenForo
  • High 7.4
    CVE-2026-73311 Public exploit

    XenForo < 2.3.13 OAuth2 Authorization Code Reuse

    XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization …

    XenForo XenForo
  • High 8.0
    CVE-2026-62911 Public exploit

    Microsoft Exchange Server Elevation of Privilege Vulnerability

    Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

    Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Exchange Server Subscription Edition RTM
  • High 7.4
    CVE-2025-69822 Public exploit

    An issue in Atomberg Atomberg Erica Smart Fan Firmware Version: V1.0.36 allows an attacker to obtain sensitive informat…

  • Critical 9.1
    CVE-2021-27289 Public exploit

    A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v…

  • Medium 4.2
    CVE-2024-39081 Public exploit

    An issue in SMART TYRE CAR & BIKE v4.2.0 allows attackers to perform a man-in-the-middle attack via Bluetooth communica…

  • Medium 5.3
    CVE-2024-45244 Public exploit

    Hyperledger Fabric does not verify request has a timestamp within the expected time window

    Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.

    github.com/hyperledger/fabric Go
  • Medium 5.9
    CVE-2022-43704 Public exploit

    The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirem…

  • High 8.1
    CVE-2022-38766 Public exploit

    The remote keyless system on Renault ZOE 2021 vehicles sends 433.92 MHz RF signals from the same Rolling Codes set for …

  • Medium 5.9
    CVE-2022-29593 Public exploit EPSS 13%

    relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post reque…