2476 matches found
CVE-2021-42849
A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access...
CVE-2021-42849
Lenovo Personal Cloud Storage is affected by CVE-2021-42849 due to a weak default password on the serial port, enabling unauthorized device access with physical access. Public details across connected docs confirm the issue but do not specify a vendor fix or affected versions. One entry notes no ...
Lenovo Personal Cloud Storage 信任管理问题漏洞
Lenovo Personal Cloud Storage Lenovo Personal Cloud Storage is a personal cloud storage from Lenovo China.Lenovo Personal Cloud Storage is vulnerable to a trust management issue, which stems from a weak default administrator password for the web interface and serial port, which could be exploited...
Lenovo Personal Cloud Storage 授权问题漏洞
Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo, a Chinese company. Lenovo Personal Cloud Storage is vulnerable to a trust management issue that stems from a weak default password for the serial port in the device, which could be exploited by an attacker to gain physical...
PT-2022-11704 · Lenovo · Lenovo Personal Cloud Storage
Name of the Vulnerable Software and Affected Versions: Lenovo Personal Cloud Storage devices affected versions not specified Description: A weak default password for the serial port was reported, which could allow unauthorized device access to an attacker with physical access. Recommendations: At...
USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor
Exploit Title: USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor Exploit Author: LiquidWorm !/usr/bin/env python3 USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor Vendor: Jinan USR IOT Technology Limited Product web page: https://www.pusr.com |...
Sensitive Information Disclosure
Jenkins Pipeline is vulnerable to sensitive information disclosure. It allows attackers with Item/Read permission to retrieve the default password parameter value from jobs. A flaw was found in Jenkins pipeline-build-step where it revealed password parameter default values when generating a...
CVE-2022-28810
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with...
CVE-2022-28810
Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with...
Verizon 4G LTE Network Extender 0.4.038.2131 Weak Credential Algorithm Exploit
Verizon's 4G LTE Network Extender is utilizing a weak default admin password generation algorithm. The password is generated using the last 4 values from device's MAC address which is disclosed on the main webUI login page to an unauthenticated attacker. The values are then concatenated with the...
pipeline-build-step: Password parameter default values exposed
A flaw was found in Jenkins pipeline-build-step where it revealed password parameter default values when generating a pipeline script using the Pipeline snippet generator. This flaw allows attackers with item/read permission to retrieve the default password parameter value from jobs and compromis...
The vulnerability of the web interface of the server application for managing food industry businesses AK-EM 800 lies in the use of rigidly encrypted user accounts (users “admin”, “administrator”, “user”, and “guest”). This allows a perpetrator to increase their privileges.
The vulnerability of the web interface of the industrial management application AK-EM 800 relates to the use of rigidly encrypted user credentials users “admin”, “administrator”, “user”, and “guest”, with the default password being “danfoss”. Exploiting this vulnerability could allow an attacker ...
BSA-2021-1722
Security Advisory ID : BSA-2021-1722 Component : hard-coded credentials Revision : 1.0 Brocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric OS v8.0.x and v7.x contain documented hard-coded credentials, which could allow attackers to gain access to the...
CVE-2022-25184
Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipeline script using the Pipeline Snippet Generator, allowing attackers with Item/Read permission to retrieve the default password parameter value from jobs...
PT-2022-17124 · Jenkins · Jenkins Pipeline: Build Step Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Pipeline: Build Step Plugin versions 2.15 and earlier Description: The issue allows attackers with Item/Read permission to retrieve the default password parameter value from jobs when generating a pipeline script using the Pipeline...
Open5GS License Issues Vulnerabilities
Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from an authorization issue vulnerability that stems from the default password of 1423 for the admin account. an attacker could exploit this vulnerability to gain access to th...
Huawei DG8045 Router 1.0 - Credential Disclosure Vulnerability
Title: Huawei DG8045 Router 1.0 - Credential Disclosure Author: Abdalrahman Gamal Vendor Homepage: www.huawei.com Version: dg8045 HardwareVersion: VER.A CVE: N/A POC: The default password of this router is the last 8 characters of the device's serial number which exist in the back of the device. ...
Huawei DG8045 Router 1.0 Credential Disclosure
Title: Huawei DG8045 Router 1.0 - Credential Disclosure Date: 2020-06-24 Author: Abdalrahman Gamal Vendor Homepage: www.huawei.com Version: dg8045 HardwareVersion: VER.A CVE: N/A POC: The default password of this router is the last 8 characters of the device's serial number which exist in the bac...
Huawei DG8045 Router 1.0 - Credential Disclosure
Title: Huawei DG8045 Router 1.0 - Credential Disclosure Date: 2020-06-24 Author: Abdalrahman Gamal Vendor Homepage: www.huawei.com Version: dg8045 HardwareVersion: VER.A CVE: N/A POC: The default password of this router is the last 8 characters of the device's serial number which exist in the bac...
