EUVD-2021-34858

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the...

CVE-2021-32085

An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the...

CVE-2021-32085

The Quest KACE Systems Deployment Appliance (SMA) 11.0.273 is vulnerable to unauthorized access due to the use of hard-coded default credentials . Specifically, the report and R1 MySQL accounts are configured with the publicly known password box747 . This oversight allows remote attackers to triv...