Lucene search
+L

5931 matches found

osv_cve
osv_cve
•added 2024/01/08 2:15 a.m.•24 views

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

9.8CVSS5.8AI score0.00497EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/08 1:43 a.m.•33 views

CVE-2023-50948 IBM Storage Fusion HCI information disclosure

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

6.5CVSS9.1AI score0.00497EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/01/08 1:43 a.m.•10 views

CVE-2023-50948 IBM Storage Fusion HCI information disclosure

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

6.5CVSS9.1AI score0.00497EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/08 1:43 a.m.•95 views

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0–2.6.1 contains hard-coded credentials used for its own inbound authentication, outbound communication to external components, or encryption of internal data. Root cause is hard-coded credentials in versions 2.1.0–2.6.1. Impact as described: potential exposure of confi...

9.8CVSS8.9AI score0.00497EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/08 12:00 a.m.•21 views

PT-2024-1495 · Bosch · Nexo-Os

Name of the Vulnerable Software and Affected Versions: NEXO-OS affected versions not specified Description: The issue allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts. This can enable the attacker to gain unauthorized...

9.8CVSS9.3AI score0.00575EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•2 views

CVE-2023-50948: Use of Hard-coded Password

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

9.8CVSS7.1AI score0.00497EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/08 12:00 a.m.•28 views

IBM Storage Fusion Security Vulnerability

IBM Storage Fusion is a fully integrated platform from International Business Machines IBM for running and maintaining all native Red Hat OpenShift applications. A security vulnerability exists in IBM Storage Fusion HCI versions 2.1.0 through 2.6.1, which stems from the system containing hard-cod...

9.8CVSS6.7AI score0.00497EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2024/01/05 5:30 p.m.•38 views

Security Bulletin: IBM Storage Fusion HCI uses hard-coded credentials for its own authentication with Active File Management (CVE-2023-50948)

Summary IBM Storage Fusion HCI uses default credentials for Active File Management AFM authentication. Vulnerability Details CVEID:CVE-2023-50948 DESCRIPTION: IBM Storage Fusion HCI contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound...

9.8CVSS8AI score0.00497EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•3 views

CVE-2023-37608: Use of Hard-coded Credentials

An issue in Automatic Systems SOC FL9600 FirstLane V06 legoT04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its hardcoded password...

7.5CVSS7.3AI score0.01137EPSS
SaveExploits4References4
NVD
NVD
•added 2023/12/28 4:15 a.m.•46 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS0.00473EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/28 4:15 a.m.•14 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS6.1AI score0.00473EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/12/28 4:15 a.m.•17 views

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS6AI score0.00473EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/28 12:00 a.m.•27 views

Peplink Balance Security Breach

Peplink Balance is a router from Peplink. A security vulnerability exists in Peplink Balance Two versions prior to 8.4.0, which stems from the use of hard-coded credentials for Console port authentication, allowing an attacker to execute arbitrary commands as root...

6.4CVSS7.5AI score0.00473EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/28 12:00 a.m.•62 views

CVE-2023-49228

Peplink Balance Two before 8.4.0 is affected. The vulnerability is in the console port authentication which uses hard-coded credentials, enabling a physically proximate attacker to execute arbitrary commands as root. Remediation: upgrade to version 8.4.0 or later; as a workaround, restrict physic...

6.4CVSS6.8AI score0.00473EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•7 views

CVE-2023-49228: Use of Hard-coded Credentials

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

6.4CVSS7.1AI score0.00473EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/27 12:00 a.m.•6 views

CVE-2023-46918: Use of Hard-coded Credentials

Phlox com.phlox.simpleserver.plus aka Simple HTTP Server PLUS 1.8.1-plus has an Android manifest file that contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an attacker with physical access to the device...

4.6CVSS6.4AI score0.00292EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•6 views

CVE-2023-46711: Use of Hard-coded Credentials

VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the password of a specific product user...

4.6CVSS6AI score0.00231EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/25 12:00 a.m.•8 views

CVE-2023-40236: Use of Hard-coded Credentials

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass...

5.3CVSS6AI score0.00387EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/12/20 1:15 a.m.•22 views

CVE-2023-47704

IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•6 views

CVE-2023-47704: Use of Hard-coded Credentials

IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force ID: 271220...

7.5CVSS7.3AI score0.00609EPSS
SaveExploits0References2
Rows per page
Query Builder