CVE-2005-2584

The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...

CVE-2005-2584: Undefined Security Weakness

The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access...

CVE-2004-2314: Undefined Security Weakness

The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access...

Low security hole affecting Mentor's ADSLFR4II router

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I've found a number of low risk issues with Mentor's ADSLFR4II router. I initially spoke to them on the 20th July, passing them full details of my findings on the 21st of July. I then emailed them again on the 4th of August asking for an update and...

Multiple Mentor ADSL router vulnerabilities

Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...

CVE-2005-2374

Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the 1 Telnet or 2 web administration interfaces...

Sybase EAServer WebConsole jaqadmin Default Password

This host appears to be the running the Sybase EAServer Management with the default administrator accounts still configured jagadmin/''. A potential intruder could reconfigure this service in a way that grants system access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2001-1538

CVE-2001-1538 affects the SpeedXess HA-120 DSL router. The vulnerability arises from a default administrative password of "speedxess" that allows remote access. The connected sources confirm the issue and its basic impact (unauthorized access to admin functions) but do not provide any remediation...

CVE-2001-1538

SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access...

CVE-2001-1543

Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera...

CVE-2002-2020

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed...

CVE-2001-1543

Axis Network Camera models 2120, 2110, 2100, 200+ and 200 are affected by CVE-2001-1543 due to a default administrator password. This root cause allows remote attackers to gain access using the credentials pass. Impact stated across multiple sources is unauthorized access to the camera. No explic...

CVE-2001-1543: Undefined Security Weakness

Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera...

CVE-2002-2020: Undefined Security Weakness

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed...

CVE-2001-1538: Undefined Security Weakness

SpeedXess HA-120 DSL router has a default administrative password of "speedxess", which allows remote attackers to gain access...

CVE-2002-1833

CVE-2002-1833 affects DocuTech 6110 and DocuTech 6115 where default administrative passwords are set ( Solaris 8.0: “service!”; Windows NT: “administ”). This default credential config allows remote attackers to gain privileges. Root cause is the existence of default admin credentials exposing a p...

CVE-2002-1833: Undefined Security Weakness

The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of 1 "service!" on Solaris 8.0 or 2 "administ" on Windows NT, which allows remote attackers to gain privileges...

CVE-2002-1738

Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email...

CVE-2002-1769

Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAPAnonymous, with a default password of LdapPassword1, which allows remote attackers the "Log on locally" privilege...

CVE-2002-1769

Microsoft Site Server 3.0 before SP4 has a default LDAP_Anonymous user with password LdapPassword_1, enabling remote attackers to log on locally with the Log on locally privilege. The vulnerability arises from setting a default account/password that grants local access, as documented in CVE-2002-...