CVE-2025-9589

CVE-2025-9589 affects Cudy WR1200EA (version 2.3.7-20250113-121810). The vulnerability concerns an unknown function in the file /etc/shadow that can be manipulated to enable default password usage. Exploitation requires local access and is rated high in complexity, with exploitation described as ...

Cudy WR1200EA 安全漏洞

The Cudy WR1200EA is a WiFi router from the Chinese company Cudy. A security vulnerability exists in the Cudy WR1200EA version 2.3.7-20250113-121810, which originates from the /etc/shadow file that can be locally tampered with, resulting in the restoration of the default password...

PT-2025-35143

Name of the Vulnerable Software and Affected Versions Cudy WR1200EA version 2.3.7-20250113-121810 Description A vulnerability exists in Cudy WR1200EA that allows for the use of a default password. The issue affects an unknown function within the /etc/shadow file. Exploitation requires local acces...

PT-2025-35116

Name of the Vulnerable Software and Affected Versions NeuVector versions prior to 5.4.6 Description NeuVector versions up to and including 5.4.5 use a hardcoded password for the built-in admin account. If this password is not changed after deployment, attackers with network access within the...

SUSE CVE-2025-8077

A vulnerability exists in NeuVector versions up to and including 5.4.5, where a fixed string is used as the default password for the built-in admin account. If this password is not changed immediately after deployment, any workload with network access within the cluster could use the default...

CVE-2025-52338

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack...

CVE-2025-52338

An issue in the default configuration of the password reset function in LogicData eCommerce Framework v5.0.9.7000 allows attackers to bypass authentication and compromise user accounts via a bruteforce attack...

PT-2025-33067 · Unknown · Shenzhen Tuoshi Nr500-Ea +1

Name of the Vulnerable Software and Affected Versions: Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLIC version 3.4.2731.16.43 Description: Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLIC devices enable the SSH service by default. A hidden, hard-coded root account exists that cannot be disabled through th...

PT-2025-37324

Name of the Vulnerable Software and Affected Versions: TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh version 2.0.0 Description: An issue allows a remote attacker to execute arbitrary code via the default password. Recommendations: Change the default password...

CVE-2025-35970

On multiple products of SEIKO EPSON and FUJIFILM Corporation, the initial administrator password is easy to guess from the information available via SNMP. If the administrator password is not changed from the initial one, a remote attacker with SNMP access can log in to the product with the...

Maka GPS Marbella KR8s 安全漏洞

Maka GPS Marbella KR8s is a car recorder from Maka GPS, Singapore. A security vulnerability exists in Maka GPS Marbella KR8s version 2.0.8, which stems from a default or weak password that could result in video recordings being downloaded...

IROAD Dashcam FX2 安全漏洞

IROAD Dashcam FX2 is a car recorder from IROAD, a South Korean company. A security vulnerability exists in IROAD Dashcam FX2, which stems from a device pairing bypass that allows an attacker to directly access the management interface after accessing it with a default password...

PT-2025-31107 · Iroad · Iroad Dash Cam Fx2

Name of the Vulnerable Software and Affected Versions: IROAD Dashcam FX2 affected versions not specified Description: A bypass of the device pairing/registration process was discovered. The HTTP server lacks restrictions, allowing direct access at http://192.168.10.1 after connecting to the...

CVE-2025-43021

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...

PT-2025-30630 · Medtronic · Mycarelink Patient Monitor

Name of the Vulnerable Software and Affected Versions: Medtronic MyCareLink Patient Monitor models 24950 and 24952 before June 25, 2025 Description: The Medtronic MyCareLink Patient Monitor contains a built-in user account with no password. This allows an attacker with physical access to log in...

CVE-2025-43021

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...

CVE-2025-43021

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...

CVE-2025-43021 Poly Clariti Manager - Multiple Security Vulnerabilities

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...

CVE-2025-43021

CVE-2025-43021 affects Poly Clariti Manager prior to 10.12.1. The issue allows the use or retrieval of the default password. HP has addressed the issue in the latest software update; affected versions are Poly Clariti Manager

CVE-2025-43021 Poly Clariti Manager - Multiple Security Vulnerabilities

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default password. HP has addressed the issue in the latest software update...