CVE-2024-39584

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution...

CVE-2024-39584

Dell CVE-2024-39584 concerns the Dell Client Platform BIOS using a default cryptographic key. Multiple sources (Dell DSA-2024-354, Nessus DSA-2024-354 plugin, NVD/CVE record) describe that a high-privileged local attacker could bypass Secure Boot and execute arbitrary code due to this key weaknes...

CVE-2024-42418

Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information...

CVE-2024-42418

Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information...

CVE-2024-42418 Avtec Outpost Use of Hard-coded Cryptographic Key

Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information...

CVE-2024-42418

Avtec Outpost (CVE-2024-42418) uses a default cryptographic key that can decrypt sensitive data. Affected: Outpost 0810 and Outpost Uploader Utility prior to version 5.0.0. Root cause: hard-coded/default key. Impact: confidentiality risk; no integrity/availability impact noted. Mitigation: upgrad...

CVE-2024-42418 Avtec Outpost Use of Hard-coded Cryptographic Key

Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information...

Avtec Outpost 0810

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Avtec Equipment : Outpost 0810, Outpost Uploader Utility Vulnerability : Storage of File with Sensitive Data Under Web Root, Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful...

PT-2024-29935 · Avtec · Avtec Outpost

Name of the Vulnerable Software and Affected Versions: Avtec Outpost affected versions not specified Description: The issue concerns the use of a default cryptographic key in Avtec Outpost, which can be exploited to decrypt sensitive information. Recommendations: At the moment, there is no...

GO-2022-0631 Hard coded cryptographic key in Kiali in github.com/kiali/kiali

Hard coded cryptographic key in Kiali in github.com/kiali/kiali...

GO-2022-0561 Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker

Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker...

GO-2022-0328 Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker

Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker...

Ewon Cosy+ Hardcoded Key

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-032 Product: Ewon Cosy+ Manufacturer: HMS Industrial Networks AB Affected Versions: Firmware Versions: 21.2s10 and 22.1s3 Tested Versions: Firmware Version: 21.2s7 Vulnerability Type: Use of Hard-coded Cryptographic Key CWE-32...

Exploit for Improper Restriction of Excessive Authentication Attempts in Logsign Unified_Secops_Platform

Logsign SIEM RCE Exploit CVE-2024-5716 & CVE-2024-5717 This...

Compromising the Secure Boot Process

This isnt good: On Thursday, researchers from security firm Binarly revealed that Secure Boot is completely compromised on more than 200 device models sold by Acer, Dell, Gigabyte, Intel, and Supermicro. The cause: a cryptographic key underpinning Secure Boot on those models that was compromised ...

CVE-2024-20323

A vulnerability in Cisco Intelligent Node iNode Software could allow an unauthenticated, remote attacker to hijack the TLS connection between Cisco iNode Manager and associated intelligent nodes and send arbitrary traffic to an affected device. This vulnerability is due to the presence of...

PT-2024-5287 · Cisco · Cisco Intelligent Node

Name of the Vulnerable Software and Affected Versions: Cisco Intelligent Node iNode Software affected versions not specified Description: The issue is related to the use of a hard-coded cryptographic key in the software, which could allow a remote attacker to exploit the vulnerability and impact...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...

CVE-2024-36526

ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key...