4398 matches found
CVE-2025-57295
H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials. The root user account has no password set, and the H3C user account uses the default password "admin," both stored in the /etc/shadow file. Attackers with network access ca...
Use of Default Credentials
Overview com.liferay.portal:com.liferay.portal.impl is a package part of Liferay. Affected versions of this package are vulnerable to Use of Default Credentials due to the API not restricting access before a user has changed their initial password. An attacker can gain unauthorized access and...
CVE-2025-55051
CWE-1392: Use of Default Credentials...
CVE-2025-55051
CWE-1392: Use of Default Credentials...
CVE-2025-55051
CWE-1392: Use of Default Credentials...
CVE-2025-55051
CWE-1392: Use of Default Credentials...
CVE-2025-55051
CVE-2025-55051 corresponds to CWE-1392 (Use of Default Credentials) with a CVSSv3.1 base score 10.0 (CRITICAL, NETWORK, no user interaction) affecting Baicells devices: Nova436Q; Nova430e/430i; NEUTRINO430; NOVA846. Root cause stated: default credentials being used leads to security feature bypas...
Use Of Default Credentials
nginx-defender is vulnerable to Use of Default Credentials. The vulnerability is due to insecure configuration due to default administrative passwords being present in example configuration files, allowing attackers with network access to gain full administrative control if not changed...
Baicells多款产品 安全漏洞
Baicells Nova436Q and others are products of Baicells Incorporated, U.S.A. Baicells Nova436Q is an advanced dual-carrier outdoor eNodeB eNB.Baicells NEUTRINO430 is an LTE base station.Baicells NOVA Series is a series of LTE base stations. A security vulnerability exists in several Baicells produc...
PT-2025-36925
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue involves the use of default credentials. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-2025-35452
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface...
CVE-2025-35452
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface...
CVE-2025-35452 Pan-Tilt-Zoom cameras default administrative credentials for web interface
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface...
CVE-2025-35452
PTZOptics and ValueHD-based PTZ cameras are affected by an insufficient authentication issue affecting the administrative web interface. The vulnerability stems from default, shared credentials and weak access controls for the /cgi-bin/param.cgi path, enabling remote, unauthenticated access to se...
CVE-2025-35452 Pan-Tilt-Zoom cameras default administrative credentials for web interface
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use default, shared credentials for the administrative web interface...
CVE-2025-35451 Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled
PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be...
PT-2025-36321
Name of the Vulnerable Software and Affected Versions: PTZOptics and ValueHD-based pan-tilt-zoom cameras affected versions not specified Description: PTZOptics and ValueHD-based pan-tilt-zoom cameras utilize default, shared credentials for the administrative web interface. This allows unauthorize...
CVE-2025-9577
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this...
TOTOLINK X2000R Use of Default Credentials Vulnerability
TOTOLINK X2000R is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R suffers from a Use Default Credentials vulnerability, which originates from an unknown functi...