Default credentials

Pivotal Cloud Foundry PCF Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist...

CVE-2016-0930

Pivotal Cloud Foundry PCF Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist...

CVE-2016-0930

Pivotal Cloud Foundry Ops Manager is affected: versions before 1.6.19 and 1.7.x before 1.7.10 expose a default password on compilation VMs when using vCloud or vSphere. This allows remote attackers to obtain SSH access during the installation window when those VMs exist. The vulnerability’s impac...

Cisco EPC3925 UPC Insecure Default Password Vulnerability

The Cisco EPC3925 is a home router device. An insecure default password vulnerability exists in the Cisco EPC3925 UPC. A remote attacker with knowledge of the default credentials could exploit this vulnerability to gain unauthorized access and perform unauthorized actions...

Lenovo PowerV Firewall cli Command Execution Vulnerability

Lenovo PowerV Firewall is a firewall product independently developed by NetGuard. A remote command execution vulnerability exists in the Lenovo Power V Firewall due to a default password. Lenovo Power V series management services run on ports 22 and 23 by default, and provide management interface...

Cisco EPC3925 UPC Modem / Router default password vulnerability

No description provided by source...

UPC Hungary Administrative Password / Insecure Transit

UPC network problems -------------------- Platforms / Firmware confirmed affected: - UPC Hungary network Problems -------- Network and device configuration problems Administration password is sent to the device in plain in the configuration file Administration password, which is used also for the...

Multiple Vulnerabilities in HPE StoreEver MSL6480 Tape Library

The HPE StoreEver MSL6480 Tape Library is a tape library from Hewlett Packard Enterprise HPE that provides tape backup, disaster recovery, or low-cost long-term archiving, among other features. An insecure default password vulnerability, a security bypass vulnerability, and a cross-site request...

The vulnerability of the microprogramming software of Cisco Linksys WRT350N routers allows malicious individuals to gain remote access to the device.

The Cisco Linsys WRT350N router has a default password of “Admin” for the administrator account, which allows a malicious individual to gain remote access to this device...

The vulnerability of the Zyxel ZLD operating system allows a remote attacker to escalate their privileges.

The Zyxel ZyWALL USG 300 network firewall/routing system has a bug during the default password change process. As a result, the Quagga and Zebra processes continue to respond to requests made with the old password...

Cisco Firepower System Software Privilege Gain Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A privilege-acquisition vulnerability exists in Cisco Firepower System Software version 6.0 and above, which stems from a default static password included in the program. A remote attacker can use this...

Default credentials

The image build process for the overcloud images in Red Hat OpenStack Platform 8.0 Liberty director and Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo director aka overcloud-full use a default root password of ROOTPW, which allows attackers to gain access via unspecified vectors...

Magnet Networks Tesley CPVA 642 Router - Weak WPA-PSK Passphrase Algorithm

Magnet Networks Tesley CPVA 642 Router - Weak WPA-PSK Passphrase Algorithm Exploit Title: Magnet Networks – Weak WPA-PSK passphrases used in Tesley CPVA 642 Router Google Dork: Date: 01/06/2016 Author: Matt O'Connor Advisory Link: https://www.rgb.ie/magnet-broadband-weak-wpa-psk-algorithm.pdf...

Iridium Xun firewall default password

No description provided by source...

Hacker Breaks into Political Party's Video Conference System; Could Spy, too!

A critical flaw in the video conferencing software of the Quebec Liberal Party PLQ − a Canadian federalist provincial political party − allowed a user to spy on and hear the strategy discussions of the party at its premises and even access the live video camera feeds. But luckily, the unknown whi...

Red Hat OpenStack Platform Design Vulnerability

Red Hat OpenStack Platform is a Red Hat platform that provides the next generation of IaaS Infrastructure as a Service cores for private, public and hybrid clouds. A security vulnerability exists in Red Hat OpenStack Platform. An attacker can exploit the vulnerability to set 'rootpw' as the defau...

CVE-2016-2286

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

Default credentials

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

CVE-2016-2286

The CVE-2016-2286 issue affects Moxa MiiNePort devices (E1_E1_7080/E1_4641 with firmware 1.1.10 Build 09120714; E2_1242/E2_4561 with firmware 1.1 Build 10080614; E3 with firmware 1.0 Build 11071409). The root cause is weak credential management: by default no password is set, enabling blank defau...

Sierra Wireless AceManager Default Password (HTTP)

Sierra Wireless AceManager is using known default credentials for the HTTP login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...