The vulnerability of the installation file initSetup_v2.0.sh, a configuration migration tool for Expedition, allows a perpetrator to gain increased privileges.

The vulnerability of the initSetupv2.0.sh file, a configuration migration tool for Expedition, lies in the use of hard-coded credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

LumisXP 16.1.x Hardcoded Credentials / IDOR

===== Tempest Security Intelligence - ADV-6/2024 ========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview Detailed description Timeli...

CVE-2024-28747

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747 ifm: Use of Hard-coded Credentials

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747 ifm: Use of Hard-coded Credentials

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747

CVE-2024-28747 affects SmartSPS devices (ifm electronic) with unauthenticated remote access via hard-coded credentials, enabling high-privilege control. Multiple sources describe the issue as a trust/credential management problem enabling remote, unauthenticated access to SmartSPS devices. The NV...

PT-2024-22555 · Smartsps · Smartsps

Name of the Vulnerable Software and Affected Versions: SmartSPS devices affected versions not specified Description: An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges. Recommendations: At the moment, there is no information...

ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS Trust Management Issue Vulnerability

The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are both a series of hosts/gateways from ifm electronic Germany. A trust management issue vulnerability exists in ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS versions 4.3.17 and earlier, which originat...

ifm electronic Smart PLC AC14xx and Smart PLC AC4xxS Trust Management Issue Vulnerability

The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are both a series of hosts/gateways from ifm electronic Germany. A trust management issue vulnerability exists in ifm electronic Smart PLC AC14xx and Smart PLC AC4xxS versions 4.3.17 and earlier, which originates from an...

Toshiba Printers Multiple Vulnerabilities (May 2024)

Multiple Toshiba printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Sharp MFP Trust Management Issue Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. The Sharp MFP suffers from a trust management issue vulnerability that arises from hard-coded credential information for accessing an external site, which can be exploited by an attacker who improperly obtains the credential...

Sharp MFP Trust Management Issue Vulnerability

The Sharp MFP is a series of multifunction printers from Sharp Japan. The Sharp MFP suffers from a trust management issue vulnerability that arises from the fact that the credential information to perform certain device functions is hard-coded and can be exploited by an attacker who improperly...

CVE-2023-41919 Use of Hard-coded Credentials in Kiloview P1/P2 devices

Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access...

CVE-2023-41919 Use of Hard-coded Credentials in Kiloview P1/P2 devices

Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access...

Kiloview P1 and P2 Security Vulnerabilities

Kiloview P1 4G Video Encoder and Kiloview P2 4G Video Encoder are both professional video encoder devices from China-based Kiloview. A security vulnerability exists in the Kiloview P1 and P2 that stems from the use of hard-coded credentials...

PT-2024-4546 · Unknown · Myscada Mypro

Name of the Vulnerable Software and Affected Versions: mySCADA myPRO affected versions not specified Description: The issue is related to the use of hard-coded credentials in mySCADA myPRO, which could allow a remote attacker to execute code on the affected device. The hardcoded password is bruml...

CVE-2024-39374

TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials...

CVE-2024-39374

TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials...

CVE-2024-39374

CVE-2024-39374 affects TELSAT marKoni FM Transmitters (Markoni-D/Compact and Markoni-DH/Exciter+Amplifiers; affected versions prior to 2.0.1). Root cause: a hidden admin account accessible via hard-coded credentials, enabling an attacker to gain administrative access without authentication. Publi...

CVE-2024-39374 Use of Hard-coded Credentials in TELSAT marKoni FM Transmitter

TELSAT marKoni FM Transmitters are vulnerable to an attacker exploiting a hidden admin account that can be accessed through the use of hard-coded credentials...