CWE-656: Reliance on Security Through Obscurity
The product uses a protection mechanism whose strength depends heavily on its obscurity, such that knowledge of its algorithms or key data is sufficient to defeat the mechanism.
10 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2024-12297 — Frontend Authorization Logic Disclosure Vulnerability
- CVE-2024-9138 — Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
- CVE-2025-59093 — Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300
- CVE-2026-7161 — GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- CVE-2026-42363 — GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- CVE-2025-7020 — BYD DiLink OS Incorrect encryption Implementation of system log dumps
- CVE-2024-5244 — TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability
Recently published
- CVE-2026-7161 — GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- CVE-2026-42363 — GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- CVE-2025-59093 — Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300
- CVE-2025-7020 — BYD DiLink OS Incorrect encryption Implementation of system log dumps
- CVE-2024-12297 — Frontend Authorization Logic Disclosure Vulnerability
- CVE-2024-9138 — Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances
- CVE-2024-5244 — TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability