Lucene search
+L

269 matches found

Prion
Prion
added 2012/08/21 6:55 p.m.19 views

Hardcoded credentials

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

10CVSS7.5AI score0.03602EPSS
SaveExploits0References5Affected Software1
ICS
ICS
added 2012/07/27 6:00 a.m.61 views

Korenix Jetport 5600 Series Hard-coded Credentials

Overview This advisory provides mitigation details for a vulnerability that impacts the Korenix JetPort 5600. Independent researcher Reid Wightman of Digital Bond identified undocumented hard-coded root credentials in the firmware of the Korenix JetPort 5600 system application without coordinatio...

10CVSS6.5AI score0.03602EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2011/06/02 8:55 p.m.5 views

CVE-2011-1623

Cisco Media Processing Software before 1.2 on Media Experience Engine MXE 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via 1 the local console, 2 an SSH session, or 3 a TELNET session, aka Bug ID CSCto77737...

10CVSS5.5AI score0.01571EPSS
SaveExploits0References6
Prion
Prion
added 2011/06/02 8:55 p.m.17 views

Default credentials

Cisco Media Processing Software before 1.2 on Media Experience Engine MXE 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via 1 the local console, 2 an SSH session, or 3 a TELNET session, aka Bug ID CSCto77737...

10CVSS6.9AI score0.01571EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2011/06/02 8:00 p.m.55 views

CVE-2011-1623

CVE-2011-1623 affects Cisco MXE 5600 devices running Cisco Media Processing Software prior to 1.2. The root user account is enabled by default with a password, allowing an attacker to gain complete control via local console, SSH, or Telnet (if enabled). Remediation documented by Cisco: upgrade to...

10CVSS6.6AI score0.01571EPSS
SaveExploits0References5Affected Software2
CVE
CVE
added 2008/12/16 6:00 p.m.54 views

CVE-2008-5600

CVE-2008-5600 affects Merlix Teamworx Server, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database file (teamworx.mdb) via a direct request. The NVD notes a Medium severity (CVSS v2 base score 5.0, vector AV:N/AC...

5CVSS6.3AI score0.02615EPSS
SaveExploits1References4Affected Software1
Circl
Circl
added 2008/12/05 12:00 a.m.10 views

CVE-2008-5600

creationtimestamp| type| source ---|---|--- 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7352...

5CVSS5.8AI score0.02615EPSS
SaveExploits1References1
CVE
CVE
added 2007/10/19 11:00 p.m.54 views

CVE-2007-5600

CVE-2007-5600 affects Artmedic CMS 3.4 and earlier. The vulnerability is an incomplete blacklist in index.php that enables remote PHP code execution via the page parameter when using URLs with UNC share pathnames or protocols such as ftps, ssh2.sftp, or ssh2.scp, since PHP remote file inclusion c...

6.8CVSS7.6AI score0.01877EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2006/10/28 1:00 a.m.37 views

CVE-2006-5600

Axalto Protiva 1.1 (possibly non-commercial versions) stores passwords in plaintext in files with insecure permissions. Local attackers can gain privileges by reading sensitive data from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Root cause appears to be ...

2.1CVSS7AI score0.0033EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder