Hardcoded credentials

2019-04-0519:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

89.9%

JSON

An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded username and password were identified that allow a remote attacker to gain admin access to the Front Circle Controller web interface.

CPENameOperatorVersion
rbw-100_firmwareeqispk527.0.0

CPE	Name	Operator	Version
	rbw-100_firmware	eq	ispk527.0.0

References

github.com/warringaa/CVEs