CVE-2022-40242

MegaRAC Default Credentials Vulnerability...

CVE-2022-40242

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259

MegaRAC Default Credentials Vulnerability...

Default credentials

MegaRAC Default Credentials Vulnerability...

Default credentials

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

CVE-2022-40259

CVE-2022-40259 is an Arbitrary Code Execution vulnerability in AMI MegaRAC Baseboard Management Controller (BMC) software, exploitable via the Redfish API. It is part of the MegaRAC BMC family (often listed with other BMC&C flaws) that affect multiple OEM platforms and can enable remote code exec...

CVE-2022-40242 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

CVE-2022-40242 MegaRAC Default Credentials Vulnerability

MegaRAC Default Credentials Vulnerability...

CVE-2022-40242

CVE-2022-40242 is the MegaRAC Default Credentials Vulnerability affecting AMI MegaRAC Baseboard Management Controller software. Public sources (NVD/Red Hat/NVIDIA advisories and Broadcom/AMI notices) describe an authentication failure where default/root credentials can grant unauthorized access t...

Default credentials

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite remote. ¶¶ An attacker can overwrite system files like system.conf and passwd, this occurs because the insecure usage of "fopen" system function with the mode "wb" which allow...

PT-2022-10917 · Zkteco · Zktime

Name of the Vulnerable Software and Affected Versions: ZKTeco ZKTime versions 10.0 through 11.1.0 Description: A default username and password for an administrator account was discovered. Recommendations: For ZKTeco ZKTime versions 10.0 through 11.1.0, consider changing the default administrator...

CVE-2021-39434

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220...

CVE-2021-39434

The CVE-2021-39434 entry concerns ZKTeco ZKTime versions 10.0 through 11.1.0 with a default administrator username/password. The root cause is the use of default credentials, enabling network access with admin rights and potentially exposing sensitive information. Documented impact is high confid...

CVE-2021-39434

A default username and password for an administrator account was discovered in ZKTeco ZKTime 10.0 through 11.1.0, builds 20180901, 20190510.1, 20200309.3, 20200930, 20201231, and 20210220...

Default credentials

An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges...

CVE-2022-45045

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

Design/Logic Flaw

Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.00000, allow authenticated users to execute arbitrary commands as root, as exploited in the wild starting in approximately 2019. A remote and authenticated...

CVE-2022-45045

The CVE-2022-45045 issue affects Xiongmai NVR models such as MBD6304T (V4.02.R11.00000117.10001.131900.00000) and NBD6808T-PL (V4.02.R11.C7431119.12001.130000.00000). It allows an authenticated attacker to execute arbitrary OS commands as root by supplying a crafted JSON during an upgrade request...