CVE-2023-42492

CVE-2023-42492 affects EisBaer Scada with a hard-coded cryptographic key (CWE-321). The root cause is use of a hard-coded key within the software, enabling potential disclosure or tampering of protected data. NVD lists a high/severe impact (Confidentiality, Integrity, Availability at high/critica...

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

Design/Logic Flaw

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

CVE-2023-30132

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key...

CVE-2023-30132

The CVE-2023-30132 vulnerability affects IXP Data EasyInstall 6.6.14907.0 and enables privilege escalation through a static cryptographic key, per multiple sources (NVD, Red Hat, CVE listings, CNNVD, etc.). The root cause is described as a cryptographic key issue that allows an attacker to escala...

Hardcoded credentials

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016...

PT-2023-6567 · Unknown · Eisbaer Scada

Name of the Vulnerable Software and Affected Versions: EisBaer Scada affected versions not specified Description: The issue is related to the use of a hard-coded cryptographic key, which can allow an attacker to gain unauthorized access to protected information. Recommendations: At the moment,...

CVE-2023-41253

When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext in the audit log. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

VulnCheck KEV: CVE-2023-28229

Microsoft Windows Cryptographic Next Generation CNG Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges...

CVE-2023-24850

CVE-2023-24850 describes memory corruption in HLOS when importing a cryptographic key into the KeyMaster Trusted Application. The vulnerability is associated with Qualcomm closed-source components and is classified with a high impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U; C/H/I/A=HIGH). The descrip...

CVE-2023-24850 Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

CVE-2023-24850 Improper Validation of Array Index in HLOS

Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application...

Qualcomm Chip Input Validation Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from an input validation error vulnerability that...

PT-2023-19825 · Qualcomm · Snapdragon +180

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected in the provided descriptions. Description: The issue involves memory corruption in HLOS when importing a cryptographic key into the KeyMaster Trusted Application. This occurs due to a...

Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25231)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3, LOGO! Soft Comfort All versions V8.3. The encryption of program data for the affected devices uses a static key. An attacker could use this key to extract confidential information from protected program...

Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25234)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3, LOGO! Soft Comfort All versions V8.3. The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions UDF in a password protected way. This...

Siemens LOGO! 8 BM Use of Hard-Coded Cryptographic Key (CVE-2020-25229)

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. The implemented encryption for communication with affected devices is prone to replay attacks due to the usage of a static key. An attacker could change the password or change the configuration on any...