Hardcoded credentials

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source...

CVE-2016-5816

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source...

CVE-2016-5816

Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455 are affected when firmware is older than 1.7.5.0. The issue is Use of Hard-Coded Cryptographic Key (CWE-321): devices contain private cryptographic keys embedded in firmware, which could allow an attacker to decrypt traffic from other sources. P...

CVE-2016-5816

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source...

CVE-2016-5816: Use of Hard-coded Credentials

A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions older than 1.7.5.0. The device utilizes hard-coded private cryptographic keys that may allow an attacker to decrypt traffic from any other source...

PT-2017-8783

Name of the Vulnerable Software and Affected Versions MRD-305-DIN versions prior to 1.7.5.0 MRD-315 versions prior to 1.7.5.0 MRD-355 versions prior to 1.7.5.0 MRD-455 versions prior to 1.7.5.0 Description A Use of Hard-Coded Cryptographic Key issue was discovered, where the device utilizes...

ICSA-17-236-01_Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455

CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit Vendor: Westermo Equipment: MRD-305-DIN, MRD-315, MRD-355, and MRD-455 Vulnerabilities: Cross-Site Request Forgery CSRF, Use of Hard-Coded Credentials, and Use of Hard-Coded Cryptographic Key AFFECTED PRODUCTS The following...

CVE-2017-10818

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

Hardcoded credentials

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10818

MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

CVE-2017-10818

CVE-2017-10818 affects Intercom MaLion for Windows and Mac (versions 3.2.1–5.2.1). The vulnerability stems from a hard-coded cryptographic key, which may allow an attacker to alter the Terminal Agent’s connection settings and spoof the Relay Service. The NVD entry documents a high/critical risk p...

PT-2017-11526

Name of the Vulnerable Software and Affected Versions MaLion for Windows and Mac versions 3.2.1 through 5.2.1 Description The issue concerns a hardcoded cryptographic key in MaLion, which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service...

Mirion Technologies Telemetry Enabled Devices

CVSS v3 5.0 Vendor: Mirion Technologies Equipment: Telemetry Enabled Devices Vulnerabilities: Use of Hard-Coded Cryptographic Key, Inadequate Encryption Strength AFFECTED PRODUCTS The following telemetry enabled devices are affected: DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-3...

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leadi...

HP SiteScope Multiple Vulnerabilities

HP SiteScope is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:hp:sitescope"; ifdescription...

PT-2017-3792

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of a hard-coded cryptographic key in the configuration file of the affected products. This increases the...

CVE-2017-6054

CVE-2017-6054 corresponds to a Use of Hard-Coded Cryptographic Key in Hyundai Blue Link mobile app versions 3.9.4 and 3.9.5. The vulnerability arises from a hard-coded decryption password used to protect sensitive user information. Rapid7 and ICS-CERT disclosures describe a log transmission featu...

CVE-2017-6054

A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. The application uses a hard-coded decryption password to protect sensitive user information...

CVE-2017-6054: Use of Hard-coded Cryptographic Key

A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. The application uses a hard-coded decryption password to protect sensitive user information...

Hyundai Motor America Blue Link

CVSS v3 7.5 ATTENTION: Remotely exploitable Vendor: Hyundai Motor America Equipment: Blue Link Vulnerability: Man-in-the-Middle, Use of Hard-Coded Cryptographic Key AFFECTED PRODUCTS The following versions of Blue Link, a mobile application for Hyundai vehicle management, are affected: Blue Link...