269 matches found
Hardcoded credentials
The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...
Korenix Jetport 5600 Series Hard-coded Credentials
Overview This advisory provides mitigation details for a vulnerability that impacts the Korenix JetPort 5600. Independent researcher Reid Wightman of Digital Bond identified undocumented hard-coded root credentials in the firmware of the Korenix JetPort 5600 system application without coordinatio...
CVE-2011-1623
Cisco Media Processing Software before 1.2 on Media Experience Engine MXE 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via 1 the local console, 2 an SSH session, or 3 a TELNET session, aka Bug ID CSCto77737...
Default credentials
Cisco Media Processing Software before 1.2 on Media Experience Engine MXE 5600 devices has a default root password, which makes it easier for context-dependent attackers to obtain access via 1 the local console, 2 an SSH session, or 3 a TELNET session, aka Bug ID CSCto77737...
CVE-2011-1623
CVE-2011-1623 affects Cisco MXE 5600 devices running Cisco Media Processing Software prior to 1.2. The root user account is enabled by default with a password, allowing an attacker to gain complete control via local console, SSH, or Telnet (if enabled). Remediation documented by Cisco: upgrade to...
CVE-2008-5600
CVE-2008-5600 affects Merlix Teamworx Server, where sensitive data is stored under the web root with insufficient access control. This allows remote attackers to download the database file (teamworx.mdb) via a direct request. The NVD notes a Medium severity (CVSS v2 base score 5.0, vector AV:N/AC...
CVE-2008-5600
creationtimestamp| type| source ---|---|--- 2008-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7352...
CVE-2007-5600
CVE-2007-5600 affects Artmedic CMS 3.4 and earlier. The vulnerability is an incomplete blacklist in index.php that enables remote PHP code execution via the page parameter when using URLs with UNC share pathnames or protocols such as ftps, ssh2.sftp, or ssh2.scp, since PHP remote file inclusion c...
CVE-2006-5600
Axalto Protiva 1.1 (possibly non-commercial versions) stores passwords in plaintext in files with insecure permissions. Local attackers can gain privileges by reading sensitive data from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Root cause appears to be ...