4280 matches found
CVE-2020-26097
The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 before 2020-10-28 embeds default credentials for root access via telnet. By exposing telnet on the Internet, remote root access on the device is possible. NOTE: This vulnerability only affects products that are no longer supported by...
CVE-2020-26097
The CVE-2020-26097 entry concerns PLANET Technology Corp NVR-915 and NVR-1615 pre-2020-10-28 firmware that embeds default root credentials accessible via Telnet. The root issue is hard-coded/default credentials allowing remote root access if Telnet is exposed to the Internet, enabling high-privil...
Default credentials
app\admin\controller\sys\Uploads.php in lemocms 1.8.x allows users to upload files to upload executable files...
PT-2020-16280 · Planet Technology · Nvr-1615 +1
Name of the Vulnerable Software and Affected Versions: PLANET Technology Corp NVR-915 versions before 2020-10-28 PLANET Technology Corp NVR-1615 versions before 2020-10-28 Description: The firmware of the PLANET Technology Corp NVR-915 and NVR-1615 embeds default credentials for root access via...
Planet NVR-915 and Planet NVR-1615 Trust Management Issues Vulnerabilities
The Planet NVR-915 is a network video recorder from China-based Planet. PLANET Technology Corp NVR-915 and NVR-1615 Versions prior to 2020-10-28 are vulnerable to a trust management issue that stems from embedding default credentials for root access via telnet. Remote root access to the device is...
CVE-2020-27555
Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...
CVE-2020-27555
Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...
CVE-2020-27555
Use of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to execute arbitrary system commands as the root user...
CVE-2020-27555
BASETech GE-131 BT-1837836 firmware 20180921 is affected by CVE-2020-27555 due to use of default credentials for the telnet server. The vulnerability allows remote attackers to execute arbitrary system commands as root. Public references in NVD assign a critical/high impact (C/H/A) with network a...
Default credentials
QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker with physical access to the device to obtain sensitive information via the debug interface keystrokes over a USB cable, aka wireless password visibility...
Basetech Ge-131 Bt-1837836 安全漏洞
The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An arbitrary system command execution vulnerability exists in the BASETech GE-131 BT-1837836. The vulnerability stems from the device using default credentials for a telnet server. A remote attacker can exploit this vulnerability to execut...
CVE-2020-26510
Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...
CVE-2020-26509
Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...
CVE-2020-26509
Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...
CVE-2020-26510
Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...
Default credentials
Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...
Default credentials
Airleader Master and Easy = 6.21 devices have default credentials that can be used for a denial of service...
CVE-2020-26510
Airleader Master = 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution...