Hardcoded credentials

2014-08-2214:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the “user” account, which makes it easier for remote attackers to obtain access via unspecified vectors.

CPENameOperatorVersion
technik_microcontrol_firmwarele1.7.0

CPE	Name	Operator	Version
	technik_microcontrol_firmware	le	1.7.0

References

seclists.org/fulldisclosure/2014/Jul/40

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt