Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

Overview ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2024-39838 Incorrect permission assignment for critical resource CWE-732 -...

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

JVN#70666401: Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Base Score 4.5 CVE-2024-39838 Incorrect...

Zexeron ZWX-2000CSW2-HN 安全漏洞

The Zexeron ZWX-2000CSW2-HN is a high-speed coaxial modem from Zexeron Corporation of Japan. A security vulnerability exists in the Zexeron ZWX-2000CSW2-HN prior to version 0.3.15, which originates from the use of hard-coded credentials that could allow a network-adjacent attacker with...

PT-2024-28693 · Unknown · Zwx-2000Csw2-Hn

Name of the Vulnerable Software and Affected Versions: ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 Description: The issue concerns the use of hard-coded credentials in the firmware, which may allow a network-adjacent attacker with administrative privilege to alter the device's...

TOTOLINK LR1200 Hardcoded Password Vulnerability

The TOTOLINK LR1200 is a wireless router designed for 4G LTE networks. The TOTOLINK LR1200 suffers from a hard-coded password vulnerability that originates from the /etc/shadow.sample page containing a use of hard-coded passwords. No details of the vulnerability are provided at this time...

Horizon Business Services Caterease 安全漏洞

Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from hard-coded SQL user credentials ...

Vonets WiFi Bridges

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Vonets Equipment : VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000...

CVE-2024-7332

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...

CVE-2024-7332

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...

CVE-2024-7332

CVE-2024-7332 affects TOTOLINK CP450 firmware 4.1.0cu.747_B20191224. The vulnerability targets the Telnet Service, specifically unknown parts of /web_cste/cgi-bin/product.ini, and stems from a hard-coded password. This allows remote, unauthenticated access with high impact (device compromise via ...

CVE-2024-7332 TOTOLINK CP450 Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...

CVE-2024-7332 TOTOLINK CP450 Telnet Service product.ini hard-coded password

A vulnerability was found in TOTOLINK CP450 4.1.0cu.747B20191224. It has been classified as critical. This affects an unknown part of the file /webcste/cgi-bin/product.ini of the component Telnet Service. The manipulation leads to use of hard-coded password. It is possible to initiate the attack...

TOTOLINK CP450 Hardcoding Vulnerability

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

PT-2024-38273 · Totolink · Totolink Cp450

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP450 version 4.1.0cu.747 B20191224 Description: A critical issue has been found, affecting the Telnet Service component, specifically an unknown part of the file /web cste/cgi-bin/product.ini. The manipulation leads to the use of a...

TOTOLINK CP450 安全漏洞

The TOTOLINK CP450 is a wireless bridge device manufactured by China's Gion Electronics TOTOLINK. A hard-coded vulnerability exists in the TOTOLINK CP450. This affects unknown parts of the /webcste/cgi-bin/product.ini file of the component Telnet Service. No details of the vulnerability are...

PT-2024-5761 · Vonets · Vonets Industrial Wifi Bridge Relays +1

Name of the Vulnerable Software and Affected Versions: Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters versions 3.3.23.6.9 and prior Description: The issue exists due to the presence of hard-coded credentials in the application code. This allows a remote attacker to bypass...

TOTOLINK A3300R /etc/shadow.sample file hardcoded password vulnerability

The TOTOLINK A3300R is a wireless router manufactured by China's Gion Electronics TOTOLINK. The TOTOLINK A3300R is vulnerable to a hard-coded password vulnerability that originates from the use of hard-coded passwords in the /etc/shadow.sample file. No details of the vulnerability are provided at...

Panasonic WV-S2231L Camera Use of Hard-coded Credentials (CVE-2020-29193)

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...