CVE-2022-47209

CVE-2022-47209 describes a backdoor-like ‘support’ user account on the device with a default password that cannot be changed through standard user-accessible means. Assets: no affected product/vendor/version details are provided in the initial document. Impact: high (consequences to confidentiali...

CVE-2022-46411

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

CVE-2022-46411

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

PT-2022-27860 · Veritas · Veritas Netbackup Access Appliance +1

Name of the Vulnerable Software and Affected Versions: Veritas NetBackup Flex Scale versions 1.0 through 3.0 Veritas NetBackup Access Appliance versions 8.0.0 through 8.0.100 Description: An issue was discovered where a default password is persisted after installation and may be discovered and us...

CVE-2022-46411

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

Veritas Technologies NetBackup Flex Scale 授权问题漏洞

Veritas Technologies NetBackup Flex Scale is a software extension from Veritas Technologies, Inc. It maximizes the power of NetBackup data protection through a containerized, horizontally scalable architecture. An authorization issue vulnerability exists in Veritas NetBackup Flex Scale 3.0 and...

CVE-2022-46411

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

CVE-2022-46411

Veritas NetBackup Flex Scale (versions 1.0–3.0) and NetBackup Access Appliance (versions 8.0.0–8.0.100) are affected by a default-password issue that persists post-install, enabling potential privilege escalation if the credentials are discovered. The vulnerability is caused by retained default c...

Realtek RTL8111EP-CG and RTL8168FP-CG Trust Management Issue Vulnerability

The Realtek RTL8111EP-CG and Realtek RTL8168FP-CG are both Ethernet controllers. A trust management issue vulnerability exists in Realtek RTL8111EP-CG, RTL8111FP-CG Firmware versions prior to 3.0.0.2019090, which stems from the Dash feature having a hard-coded password that can be exploited by an...

CVE-2022-32967

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-coded default password during system reboot triggered by other user, to acquire partial system information such as serial number and server information...

Hewlett Packard Enterprise OfficeConnect 1820 Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Hewlett Packard Enterprise OfficeConnect 1820 switches. Authentication is not required to exploit this vulnerability. The specific flaw exists within the defaultpasswordcfg.lua endpoint. The...

Remote Mouse 4.110 Remote Code Execution Exploit

This Metasploit module utilizes the Remote Mouse Server by Emote Interactive protocol to deploy a payload and run it from the server. This module will only deploy a payload if the server is set without a password default. Tested against 4.110, current at the time of module writing. This module...

Cisco vManage 信任管理问题漏洞

Cisco vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. Cisco vManage is vulnerable to a trust management issue. A remote attacker exploiting this vulnerability would be able to acces...

Unable to login HA Secondary ADC with default password after upgrading from 12.1 to 13.0

You may using Citrix HA ADC default password in 12.1/11.1 legacy builds, and upgrading an ADC HA Secondary Node to 13.0, then found you cannot login to Secondary Node with default password. Error: Invalid username or password...

PT-2022-19980 · Ma Lighting · Ma Lighting Grandma2 Light

Name of the Vulnerable Software and Affected Versions: MA Lighting grandMA2 Light affected versions not specified Description: The issue concerns a default password for the root account, which is set to root. The vendor notes that the product was designed for use on isolated networks. Additionall...

CVE-2022-35198

Contract Management System v2.0 contains a weak default password which gives attackers to access database connection information...

CVE-2022-35198

The CVE-2022-35198 entry concerns Contract Management System v2.0 with a weak default password that can expose database connection information. This vulnerability is supported by multiple connected records noting the same issue, including a High severity CVSS 3.1 score (7.5), attack vector networ...

PT-2022-22628 · Unknown · Contract Management System

Name of the Vulnerable Software and Affected Versions: Contract Management System version 2.0 Description: The issue is related to a weak default password in the Contract Management System, which allows attackers to access database connection information. Recommendations: For Contract Management...

Contract Management System 授权问题漏洞

Contract Management System is a contract management system. It enables companies to create new contracts and track the status of existing contracts to ensure that employees, vendors, and customers meet defined requirements. A security vulnerability exists in Contract Management System version v2....

Default credentials

Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...