This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
This weakness can allow an attacker to access resources which are not otherwise accessible without proper authentication.
CWE-1390
CWE-287
CVE-2022-30319
S-bus functionality in a home automation product performs access control using an IP allowlist, which can be bypassed by a forged IP address.
CVE-2009-1048
VOIP product allows authentication bypass using 127.0.0.1 in the Host header.