Lucene search
+L

1352 matches found

attackerkb
attackerkb
•added 2022/05/13 8:15 p.m.•14 views

CVE-2022-1701

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data...

7.5CVSS5.8AI score0.04754EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/05/13 8:15 p.m.•17 views

CVE-2022-1701

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data...

7.5CVSS5.8AI score0.04754EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•10 views

CVE-2022-1701: Use of Hard-coded Cryptographic Key

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data...

7.5CVSS6.8AI score0.04754EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2022/04/19 11:25 p.m.•14 views

CVE-2022-24860 Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP address...

7.4CVSS9.5AI score0.01684EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/04/06 10:15 a.m.•14 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/06 10:15 a.m.•17 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/04/06 9:30 a.m.•43 views

CVE-2022-23440

A use of hard-coded cryptographic key vulnerability CWE-321 in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment...

7.8CVSS7.6AI score0.00197EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/06 9:15 a.m.•21 views

CVE-2022-23441

A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...

9.1CVSS7.3AI score0.00934EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/06 9:15 a.m.•21 views

CVE-2022-23441

A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...

9.1CVSS7.3AI score0.00934EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/18 6:15 p.m.•17 views

CVE-2020-25193

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection...

5.3CVSS5.8AI score0.00859EPSS
SaveExploits0References2
CVE
CVE
•added 2022/03/07 9:49 p.m.•131 views

CVE-2022-25217

CVE-2022-25217 involves hard-coded RSA keys in telnetd_startup on Phicomm/K2 and K3C firmware. A local attacker within the LAN can obtain a root shell by leveraging the leaked private key to trigger telnetd_startup via scripted UDP exchanges, spawning an unauthenticated root telnet shell. Concret...

7.8CVSS7.6AI score0.00329EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/02/19 12:01 a.m.•64 views

GHSA-6RRW-4FM9-RGHV Use of Hard-coded Cryptographic Key in Netmaker

Netmaker prior to versions 0.8.5, 0.9.4, 0.10.0, and 0.10.1 uses a hard-coded cryptographic key...

8.8CVSS9.3AI score0.01714EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2022/02/18 10:00 p.m.•11 views

CVE-2022-23650 Use of Hard-coded Cryptographic Key in Netmaker

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if the exploiter know the address and...

7.2CVSS7.5AI score0.01556EPSS
SaveExploits0References4
Mend
Mend
•added 2022/02/18 10:00 p.m.•6 views

CVE-2022-23650

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if the exploiter know the address and...

9CVSS0.01556EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2022/02/18 2:15 p.m.•15 views

CVE-2022-0664

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1...

10CVSS7.6AI score0.01714EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/18 12:00 a.m.•6 views

CVE-2022-23650: Use of Hard-coded Cryptographic Key

Netmaker is a platform for creating and managing virtual overlay networks using WireGuard. Prior to versions 0.8.5, 0.9.4, and 010.0, there is a hard-coded cryptographic key in the code base which can be exploited to run admin commands on a remote server if the exploiter know the address and...

9CVSS7.6AI score0.01556EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•12 views

PT-2022-16161

Name of the Vulnerable Software and Affected Versions Netmaker versions prior to 0.8.5 Netmaker versions prior to 0.9.4 Netmaker versions prior to 0.10.0 Description The issue is related to a hard-coded cryptographic key in the code base of Netmaker, a platform for creating and managing virtual...

9CVSS7.3AI score0.01556EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•13 views

PT-2022-13342

Name of the Vulnerable Software and Affected Versions Netmaker versions prior to 0.8.5 Netmaker versions prior to 0.9.4 Netmaker versions prior to 0.10.0 Netmaker versions prior to 0.10.1 Description The issue is related to the use of a hard-coded cryptographic key in Netmaker. This could...

10CVSS7.3AI score0.01714EPSS
SaveExploits1References11
attackerkb
attackerkb
•added 2022/02/17 7:15 p.m.•8 views

CVE-2021-46247

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00...

7.5CVSS7.2AI score0.01178EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/17 7:15 p.m.•17 views

CVE-2021-46247

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00...

7.5CVSS7.1AI score0.01178EPSS
SaveExploits1References1
Rows per page
Query Builder