CVE-2014-5396

2022-10-0316:20:42

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the “user” account, which makes it easier for remote attackers to obtain access via unspecified vectors.

References

seclists.org/fulldisclosure/2014/Jul/40

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt