SolarWinds Log and Event Manager Elevation of Privilege Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A privilege acquisition vulnerability exists in SolarWinds Log and Event Manager version 6.3.1. This vulnerability can be exploited by a local...

Zyxel WRE6505 DNS Hijacking Vulnerability

The Zyxel WRE6505 is a wireless AC750 range extender. The Zyxel WRE6505 device's root and admin accounts use the default TELNET password of 1234, resulting in easier DNS hijacking attacks by remote attackers by reconfiguring the built-in dnshijacker process...

CVE-2015-7246

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access...

CVE-2015-7246

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw account, which makes it easier for remote attackers to obtain administrative access...

CVE-2015-7246

CVE-2015-7246 affects D-Link DVG-N5402SP web management firmware W1000CN-00, W1000CN-03, and W2000EN-00. The issue is the presence of default credentials: root for the root account and tw for the tw account, enabling remote attackers to obtain administrative access via the device’s web interface....

Default credentials

ExaGrid appliances with firmware before 4.8 P26 have a default password of 1 inflection for the root shell account and 2 support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session...

CVE-2016-1560

ExaGrid appliances with firmware before 4.8 P26 have a default password of 1 inflection for the root shell account and 2 support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session...

CVE-2016-1560

ExaGrid appliances running firmware before 4.8 P26 are affected by CVE-2016-1560 due to default credentials: root shell account password (inflection) and support account access via the web interface. This enables remote attackers to obtain administrative access through SSH or HTTP without exploit...

CVE-2016-1560

ExaGrid appliances with firmware before 4.8 P26 have a default password of 1 inflection for the root shell account and 2 support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session...

Trend Micro Threat Discovery Appliance 2.6.1062r1 logoff.cgi Directory Traversal

!/usr/local/bin/python """ Trend Micro Threat Discovery Appliance = 2.6.1062r1 logoff.cgi Directory Traversal Authentication Bypass Vulnerability Found by: Steven Seeley of Source Incite & Roberto Suggi Liverani - @malerisch - http://blog.malerisch.net/ File: TDAInstallationCD.2.6.1062r1.enUS.iso...

CVE-2017-7964

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

Default credentials

Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to conduct DNS hijacking attacks by reconfiguring the built-in dnshijacker process...

CVE-2015-8282

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account...

Default credentials

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account...

CVE-2015-8282

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account...

CVE-2015-8282

SeaWell Networks Spectrum SDC 02.05.00 is affected by CVE-2015-8282 due to a default admin password. The vulnerability enables unauthorized access via the admin account with no authentication required, leading to potential confidentiality, integrity, and availability impacts as reflected by CVSS ...

Default Password 'adminIWSS85' for 'root' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default Password 'adminIWSS85' for 'admin' Account

The account 'admin' on the remote host has the default password 'adminIWSS85'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin"; password = "adminIWSS85";...

CVE-2017-7306

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that...

CVE-2017-7306

Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number. NOTE: the vendor believes that...