PT-2025-24678 · Unknown · Energy Services

Name of the Vulnerable Software and Affected Versions: Energy Services versions with G5DFR Description: A vulnerability has been identified in Energy Services where affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of the G5DFR component and...

VulnCheck KEV: CVE-2025-26793

The Web GUI configuration panel of Hirsch formerly Identiv and Viscount Enterphone MESH through 2024 ships with default credentials username freedom, password viscount. The administrator is not prompted to change these credentials on initial configuration, and changing the credentials...

CVE-2024-40113

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...

CVE-2024-40113

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...

CVE-2024-40113

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...

CVE-2024-40113

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...

CVE-2024-40113

CVE-2024-40113 affects the Sitecom WLX-2006 Wall Mount Range Extender N300, versions 1.5 and earlier. The vulnerability stems from the use of default credentials, enabling unauthorized access to the device. The CVE records consistently describe the affected product and the underlying issue as the...

Sitecom WLX-2006 Wall Mount Range Extender N300 安全漏洞

The Sitecom WLX-2006 Wall Mount Range Extender N300 is a wall mount range extender from Sitecom. A security vulnerability exists in the Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and earlier versions that stems from the use of default credentials...

CVE-2024-40113

Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials...

PT-2025-23524 · Sitecom · Sitecom Wlx-2006

Name of the Vulnerable Software and Affected Versions: Sitecom WLX-2006 Wall Mount Range Extender N300 versions 1.5 and earlier Description: The issue concerns the use of default credentials in the Sitecom WLX-2006 Wall Mount Range Extender N300. This allows unauthorized access to the device. No...

CVE-2025-4633

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal...

CVE-2025-4633

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal...

CVE-2025-4633 Default Credentials

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal...

CVE-2025-4633 Default Credentials

Default credentials were present in the web portal for Airpointer 2.4.107-2, allowing an unauthenticated malicious actor to log in via the web portal...

CVE-2025-4633

CVE-2025-4633 concerns Airpointer 2.4.107-2 where default credentials in the web portal allow an unauthenticated attacker to log in. Affected component: the web portal of Airpointer 2.4.107-2; root cause is default credentials enabling access without authentication. Impact notes from sources indi...

PT-2025-23270

Name of the Vulnerable Software and Affected Versions: Airpointer version 2.4.107-2 Description: The issue concerns default credentials being present in the web portal, allowing an unauthenticated malicious actor to log in via the web portal. Recommendations: For Airpointer version 2.4.107-2,...

jct-aq Airpointer 2D 信任管理问题漏洞

The jct-aq Airpointer 2D is a device for air quality monitoring from jct-aq Austria. A security vulnerability exists in the jct-aq Airpointer 2D version 2.4.107-2, which stems from default credentials and could lead to unauthorized access...

PT-2025-23149 · Mici Network Co. · Netfax Server

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated HTTP GET request to the "/client.php" endpoint will disclose the default administrator user credentials. Recommendations: At the moment, there is no information about a...

CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)

In the course of a penetration testing engagement, Rapid7 discovered three vulnerabilities in MICI Network Co., Ltd’s NetFax server versions 3.0.1.0. These issues allowed for an authenticated attack chain resulting in Remote Code Execution RCE against the device as the root user. While...

Ivanti Cloud Services Application Elevation of Privilege Vulnerability

The Ivanti Cloud Services Application CSA is a locally deployed virtual appliance designed to simplify and enhance the integration of Ivanti products with cloud services. An elevation of privilege vulnerability exists in Ivanti Cloud Services Application, which is derived from default credentials...