Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-5396
cve-2014-5396
schrack technik
microcontrol
firmware
hardcoded password
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the “user” account, which makes it easier for remote attackers to obtain access via unspecified vectors.
Affected configurations
Node
schracktechnik_microcontrol_firmwareRange≤1.7.0
schracktechnik_microcontrolMatch-
Related
nvd
nvd
CVE-2014-5396
2014-08-22 14:55:09
prion
prion
Hardcoded credentials
2014-08-22 14:55:00
cvelist
cvelist
CVE-2014-5396
2022-10-03 16:20:42
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.4%
Related for CVE-2014-5396