Lucene search
+L

5870 matches found

attackerkb
attackerkb
•added 2020/12/21 6:15 p.m.•10 views

CVE-2020-6882

ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain information about other devices by sending specifi...

7.5CVSS7.5AI score0.01236EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/21 12:00 a.m.•6 views

CVE-2020-8995: Use of Hard-coded Credentials

Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastructure including the website, update server, and external issue tracking tools...

9.8CVSS5.9AI score0.02163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/12/21 12:00 a.m.•5 views

PT-2020-19292

Name of the Vulnerable Software and Affected Versions ZTE E8810 version 1.0.26 ZTE E8810 version 2.0.1 ZTE E8820 version 1.1.3L ZTE E8820 version 2.0.13 ZTE E8822 version 2.0.13 Description The issue is caused by hard-coded MQTT service access credentials on the device, allowing a remote attacker...

7.5CVSS0.01236EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/21 12:00 a.m.•6 views

CVE-2020-6882: Use of Hard-coded Credentials

ZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by hard-coded MQTT service access credentials on the device. The remote attacker could use this credential to connect to the MQTT server, so as to obtain information about other devices by sending specifi...

7.5CVSS5.7AI score0.01236EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/16 3:15 p.m.•20 views

CVE-2020-25620

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

7.8CVSS7.1AI score0.0043EPSS
SaveExploits0References3
NVD
NVD
•added 2020/12/16 3:15 p.m.•32 views

CVE-2020-25620

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

7.8CVSS7.6AI score0.0043EPSS
SaveExploits0References3
CVE
CVE
•added 2020/12/16 2:04 p.m.•67 views

CVE-2020-25620

CVE-2020-25620 affects SolarWinds N-Central 12.3.0.670. The issue is due to hard-coded credentials for local accounts [email protected] and [email protected], which allow logins to the NAC and/or the regular web interface. The connected sources confirm the credential issue but do not provide...

7.8CVSS7.5AI score0.0043EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2020/12/16 2:04 p.m.•32 views

CVE-2020-25620

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

7.6AI score0.0043EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2020/12/16 12:00 a.m.•21 views

SolarWinds N-Central 信任管理问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

7.8CVSS7.1AI score0.0043EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/12/16 12:00 a.m.•1 views

PT-2020-16132

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in SolarWinds N-Central where hard-coded credentials exist by default for local user accounts named [email protected] and [email protected]. These credentials all...

7.8CVSS0.0043EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/16 12:00 a.m.•7 views

CVE-2020-25620: Use of Hard-coded Credentials

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

7.8CVSS5.8AI score0.0043EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•4 views

CVE-2020-35338: Use of Hard-coded Credentials

The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal WMT Playout Server 20.2.8 and earlier has a default account with a password of "pokon."...

9.8CVSS5.8AI score0.12111EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•8 views

CVE-2020-0016: Use of Hard-coded Credentials

In the Broadcom Nexus firmware, there is an insecure default password. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-171413483...

7.8CVSS5.9AI score0.00175EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/29 12:00 a.m.•4 views

CVE-2020-29377: Use of Hard-coded Credentials

An issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is compared to the password provided by the the remote attacker. If it matches, access is provided...

9.8CVSS5.8AI score0.01318EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/29 12:00 a.m.•6 views

CVE-2020-29375: Use of Hard-coded Credentials

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged non-admin attacker can use a hardcoded password 4ef9cea10b2362f15ba4558b1d5c081f to create an admin user...

8.8CVSS5.7AI score0.00809EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/29 12:00 a.m.•4 views

CVE-2020-29376: Use of Hard-coded Credentials

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. There is an !j@ly$z%x6x7q8c9z password for the admin account to authenticate to the TELNET service...

9.8CVSS5.8AI score0.01122EPSS
SaveExploits1References2
NVD
NVD
•added 2020/11/24 7:15 p.m.•35 views

CVE-2020-28334

Barco wePresent WiPG-1600W devices use Hard-coded Credentials issue 2 of 2. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-283...

10CVSS7.3AI score0.04765EPSS
SaveExploits3References2
Prion
Prion
•added 2020/11/24 7:15 p.m.•36 views

Hardcoded credentials

Barco wePresent WiPG-1600W devices use Hard-coded Credentials issue 2 of 2. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-283...

10CVSS7.8AI score0.04765EPSS
SaveExploits13References2Affected Software1
Cvelist
Cvelist
•added 2020/11/24 6:17 p.m.•36 views

CVE-2020-28334

Barco wePresent WiPG-1600W devices use Hard-coded Credentials issue 2 of 2. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19. The Barco wePresent WiPG-1600W device has a hardcoded root password hash included in the firmware image. Exploiting CVE-2020-28329, CVE-2020-28330 and CVE-2020-283...

7.9AI score0.04765EPSS
SaveExploits3References2
CVE
CVE
•added 2020/11/24 6:17 p.m.•104 views

CVE-2020-28334

Barco wePresent WiPG-1600W devices are affected by CVE-2020-28334 due to a hard-coded root password hash embedded in firmware for affected versions 2.5.1.8, 2.5.0.25, 2.5.0.24 and 2.4.1.19. Related connected CVEs (CVE-2020-28329, CVE-2020-28330, CVE-2020-28331) describe a chain of issues: a hard-...

10CVSS7.8AI score0.04765EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder