4266 matches found
Cisco Modular Encoding Platform D9036 Software Default Credentials Vulnerability
A vulnerability in Cisco Modular Encoding Platform D9036 Software could allow an unauthenticated, remote attacker to log in to the system shell with the privileges of the root user. The vulnerability occurs because the root user has a default and static password. This account is created at...
Default credentials
Web Viewer 1.0.0.193 on Samsung SRN-1670D devices allows remote attackers to discover credentials by reading detailed error messages...
General Electric's MDS PulseNET < 3.1.5 Multiple Vulnerabilities
Binary data 9052.prm...
Cisco Aironet 1800 Series Access Point Default Static Account Credentials Vulnerability
The Cisco Aironet 1800 Series Access Point is a small to medium-sized wireless network access point product. A security vulnerability exists in the Cisco Aironet 1800 Series Access Point devices due to a default user account created during device installation. It could allow an unauthenticated...
Fortinet FortiOS SSH Undocumented Interactive Login Vulnerability
The SSH server running on the remote host can be logged into using default SSH credentials. The 'FortimanagerAccess' account has a password based on the string 'FGTAbc11xy+Qqz27' and a calculated hash that is publicly known. A remote attacker can exploit this to gain administrative access to the...
SAP Hybris E-commerce Suite VirtualJDBC - Default Credentials
Application: SAP Hybris E-commerce Suite Versions Affected: SAP Hybris E-commerce Suite 5.1.0.3 Vendor URL: SAP Bugs: Default credentials Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 10.05.2016 Author: Alexey Tyurin ERPScan VULNERABILITY INFORMATION Class: CWE-259 Use...
Default credentials
The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain administrative privileges by leveraging a LAN session...
Default credentials
The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the medialink account, which allows remote attackers to obtain administrative privileges by leveraging a...
Default credentials
Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session...
Damn Vulnerable Node Application: DVNA
Damn Vulnerable Node Application DVNA is a node.js web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and to aid...
Cisco Prime Collaboration Assurance Default 'cmuser' Credentials (cisco-sa-20151209-pca)
The remote Cisco Prime Collaboration Assurance device is protected by default credentials. This is due to an undocumented account that is created during installation. A remote attacker can exploit this to log in to the system shell with the default 'cmuser' user account, and access the shell with...
Adcon A840 Telemetry Gateway 'adv' Default Credentials (Telnet)
The remote Adcon A840 Telemetry Gateway has default credentials set. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Adcon A840 Telemetry Gateway 'root' Default Credentials (Telnet)
The remote Adcon A840 Telemetry Gateway has default credentials set. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Oracle GlassFish Admin Default Credentials (HTTP)
The remote Oracle GlassFish instance is using known default credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
ComfortableMexicanSofa CMS Engine Admin Default Credentials (HTTP)
The remote ComfortableMexicanSofa CMS Engine is using known default credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...
ZyXEL NBG-418N router uses default credentials and is vulnerable to cross-site request forgery
Overview ZyXEL NBG-418N router, firmware version 1.00AADZ.3C0, uses default credentials and is vulnerable to cross-site request forgery. Description CWE-255: Credentials Management - CVE-2015-7283The ZyXEL NBG-418N web administration interface uses non-random default credentials of admin:1234. A...
Amped Wireless R10000 router contains multiple vulnerabilities
Overview Amped Wireless R10000 router, firmware version 2.5.2.11, uses default credentials, is vulnerable to cross-site request forgery, and uses insufficiently random values for DNS queries. Description CWE-255: Credentials Management - CVE-2015-7277The Amped Wireless R10000 web administration...
HomeMatic Default Credentials (SSH)
The remote HomeMatic device is using known default credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Kanboard Default Credentials (HTTP)
The remote Kanboard web interface is using known default credentials. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...