Lucene search
+L

4266 matches found

NVD
NVD
added 2024/10/28 5:15 p.m.27 views

CVE-2024-6245

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

7.4CVSS0.00207EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/28 4:42 p.m.45 views

CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

7.4CVSS0.00207EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/28 4:42 p.m.17 views

CVE-2024-6245 Default Credentials in ssh service for SmartPlay in Maruti Suzuki

Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux Infotainment Hub modules allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50...

7.4CVSS6.9AI score0.00207EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/28 4:42 p.m.70 views

CVE-2024-6245

CVE-2024-6245 applies to Maruti Suzuki SmartPlay (Linux Infotainment Hub) with firmware 66T0.05.50. The issue is use of default credentials that lets an attacker try common or default usernames and passwords, detected on a 2022 Brezza in India. CVSSv3.1 score is 7.4 (HIGH) with Adjacent attack ve...

7.4CVSS7.4AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/10/28 12:0 a.m.8 views

Maruti Suzuki SmartPlay 安全漏洞

Maruti Suzuki SmartPlay is an infotainment system from Maruti Suzuki. A security vulnerability exists in Maruti Suzuki SmartPlay version 66T0.05.50. An attacker could exploit the vulnerability to try commonly used or default usernames and passwords...

7.4CVSS6.7AI score0.00207EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/28 12:0 a.m.10 views

PT-2024-37477 · Maruti Suzuki · Maruti Suzuki Smartplay

Name of the Vulnerable Software and Affected Versions: Maruti Suzuki SmartPlay version 66T0.05.50 Description: The issue is related to the use of default credentials in Maruti Suzuki SmartPlay on Linux, specifically in Infotainment Hub modules. This allows an attacker to attempt common or default...

7.4CVSS7.1AI score0.00207EPSS
SaveExploits0References4
Veracode
Veracode
added 2024/10/25 7:53 a.m.8 views

Ununauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which could allow attackers to gain root access if they reach the VM wher...

9.8CVSS7.1AI score0.02208EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2024/10/25 7:12 a.m.8 views

Unauthorized Root Access

github.com/kubernetes-sigs/image-builder is vulnerable to Unauthorized Root Access. The vulnerability is due to default credentials being enabled during the image build process with the Nutanix, OVA, QEMU, or raw providers, which allows an attacker to gain root access if they reach the VM where t...

8.1CVSS6.9AI score0.0163EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2024/10/24 8:15 p.m.34 views

CVE-2024-45242

EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2c1.9.51 allow blind OS Command Injection via shell metacharacters to the Ping or Speed Test utility. During the time of initial setup, the device creates an open unsecured network whose admin panel is configured with the default credential...

7.8CVSS0.34662EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/24 12:0 a.m.18 views

CVE-2024-45242

EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2c1.9.51 allow blind OS Command Injection via shell metacharacters to the Ping or Speed Test utility. During the time of initial setup, the device creates an open unsecured network whose admin panel is configured with the default credential...

8.2AI score0.34662EPSS
SaveExploits0References2
CVE
CVE
added 2024/10/24 12:0 a.m.54 views

CVE-2024-45242

EnGenius ENH1350EXT A8J-ENH1350EXT devices up to 3.9.3.2_c1.9.51 are affected by a blind OS command injection via shell metacharacters in the Ping/Speed Test utilities. A window during initial setup creates an open unsecured network with default admin/admin credentials, allowing a nearby attacker...

7.8CVSS8.2AI score0.34662EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/10/24 12:0 a.m.85 views

CVE-2024-45242

EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2c1.9.51 allow blind OS Command Injection via shell metacharacters to the Ping or Speed Test utility. During the time of initial setup, the device creates an open unsecured network whose admin panel is configured with the default credential...

0.34662EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/17 3:37 p.m.22 views

GO-2024-3204 VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder

VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder...

8.1CVSS6.9AI score0.0163EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/17 3:37 p.m.38 views

GO-2024-3203 VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder

VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder...

9.8CVSS9.5AI score0.02208EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/10/16 6:26 p.m.29 views

CVE-2024-9486

A vulnerability was found in Kubernetes Image Builder. Kubernetes Image Builder default credentials are enabled during the image build process when using Proxmox. The credentials can be used to gain root access. The credentials are disabled after the image build process. Kubernetes clusters are...

9.8CVSS7.2AI score0.02208EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2024/10/15 9:55 p.m.30 views

CVE-2024-9594

A flaw was found in Kubernetes Image Builder. Kubernetes Image Builder default credentials are enabled during the image build process when using Nutanix, OVA, QEMU, or raw providers. The credentials can be used to gain root access. The credentials are disabled after the image build process...

6.3CVSS6.7AI score0.0163EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2024/10/15 9:30 p.m.47 views

VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder

A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be...

9.8CVSS7.4AI score0.02208EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2024/10/15 9:30 p.m.21 views

VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder

A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusi...

8.1CVSS7.2AI score0.0163EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/10/15 9:30 p.m.28 views

GHSA-9224-GGVW-WH7V VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder

A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process. Virtual machine images built using the Proxmox provider do not disable these default credentials, and nodes using the resulting images may be...

9.8CVSS9.6AI score0.02208EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/15 9:30 p.m.16 views

GHSA-8JPG-62JC-HWHR VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder

A security issue was discovered in the Kubernetes Image Builder versions = v0.1.37 where default credentials are enabled during the image build process when using the Nutanix, OVA, QEMU or raw providers. The credentials can be used to gain root access. The credentials are disabled at the conclusi...

6.3CVSS6.9AI score0.0163EPSS
SaveExploits0References4
Rows per page
Query Builder