Lucene search
HistoryDec 23, 2012 - 9:55 p.m.
CVE-2012-6428
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.2%
Carlo Gavazzi EOS-Box with firmware before 1.0.0.1080_2.1.10 establishes multiple hardcoded accounts, which makes it easier for remote attackers to obtain administrative access by reading a password in a PHP script, a similar issue to CVE-2012-5862.
Affected configurations
Node
carlosgavazzieos-box_photovoltaic_monitoring_system_firmwareRange≤1.0.0
carlosgavazzieos-box_photovoltaic_monitoring_systemMatch-
Related
prion
prion
Hardcoded credentials
2012-12-23 21:55:00
Hardcoded credentials
2012-11-23 12:09:00
cvelist
cvelist
CVE-2012-6428
2022-10-03 16:15:29
CVE-2012-5862
2012-11-23 11:00:00
cve
cve
CVE-2012-6428
2022-10-03 16:15:29
CVE-2012-5862
2012-11-23 12:09:58
nvd
nvd
CVE-2012-5862
2012-11-23 12:09:58
ics
ics
Carlo Gavazzi EOS Box Multiple Vulnerabilities
2013-08-28 12:00:00
Sinapsi Devices Vulnerabilities
2020-01-10 12:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
79.2%
Related for NVD:CVE-2012-6428