Lucene search
+L

5877 matches found

Cvelist
Cvelist
•added 2022/05/24 3:30 p.m.•29 views

CVE-2013-10002 Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

6.5CVSS9.2AI score0.00799EPSS
SaveExploits0References2
CVE
CVE
•added 2022/05/24 3:30 p.m.•65 views

CVE-2013-10002

The CVE affects Telecommunication Software SAMwin Contact Center Suite 5.1. The root cause is the getCurrentDBVersion function in the credential handler library SAMwinLIBVB.dll, which relies on hard-coded credentials for authentication. This leads to potential credential exposure and unauthorized...

9.1CVSS7.8AI score0.00799EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2022/05/24 12:00 a.m.•18 views

Telecommunication Software SAMwin Contact Center Suite 信任管理问题漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1, which stems from a function...

9.1CVSS8.2AI score0.00799EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•3 views

PT-2022-7725

Name of the Vulnerable Software and Affected Versions Telecommunication Software SAMwin Contact Center Suite version 5.1 Description A critical issue affects the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler, allowing authentication with hard-coded...

9.1CVSS0.00799EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•9 views

CVE-2013-10002: Use of Hard-coded Credentials

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwinLIBVB.dll of the credential handler. Authentication is possible with hard-coded credentials...

9.1CVSS7.6AI score0.00799EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/05/23 12:00 a.m.•57 views

Rakuten Mobile Rakuten Casa Trust Management Issue Vulnerability

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. A trust management issue vulnerability exists in Rakuten Mobile Rakuten Casa APFV200 and APFV141 versions, which stems from the presence of hard-coded credentials in the application code. An unauthenticated, remot...

5CVSS3.1AI score0.01499EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/05/19 6:13 a.m.•27 views

Multiple vulnerabilities in Rakuten Casa

Overview Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Improper Access Control CWE-284 - CVE-2022-28704 Improper Access Control CWE-284 - CVE-2022-26834 CVE-2022-29525 Narumi Hirai of LAC Co.,...

9.8CVSS7.1AI score0.02647EPSS
SaveExploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/05/19 12:00 a.m.•74 views

JVN#46892984: Multiple vulnerabilities in Rakuten Casa

Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 5.9 CVSS v2| AV:N/AC:M/Au:N/C:C/I:N/A:N| Base...

9.8CVSS8AI score0.02647EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•7 views

CVE-2021-42849: Use of Hard-coded Credentials

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access...

6.8CVSS6.8AI score0.00233EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•10 views

CVE-2021-42850: Use of Hard-coded Credentials

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

8.8CVSS7.3AI score0.00243EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•8 views

CVE-2022-29645: Use of Hard-coded Credentials

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

10CVSS8.1AI score0.01471EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/18 12:00 a.m.•8 views

CVE-2022-29644: Use of Hard-coded Credentials

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

10CVSS8.1AI score0.016EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/13 8:15 p.m.•36 views

Hardcoded credentials

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data...

5CVSS7.5AI score0.04754EPSS
SaveExploits0References1Affected Software5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/11 12:00 a.m.•6 views

CVE-2021-38969: Use of Hard-coded Credentials

IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials. IBM X-Force ID: 212609...

9.8CVSS6.5AI score0.00727EPSS
SaveExploits0References2
Exploit DB
Exploit DB
•added 2022/05/11 12:00 a.m.•327 views

USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor

Exploit Title: USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 - Remote Root Backdoor Exploit Author: LiquidWorm !/usr/bin/env python3 USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor Vendor: Jinan USR IOT Technology Limited Product web page: https://www.pusr.com |...

5.3AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/05/10 7:00 a.m.•7 views

CVE-2022-30234

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to be executed when root level access is obtained. Affected Products: Wiser Smart, EER21000 & EER21001 V4.5 and prior...

10CVSS7.5AI score0.01176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•4 views

PT-2022-3206

Name of the Vulnerable Software and Affected Versions Wiser Smart versions 4.5 and prior EER21000 versions 4.5 and prior EER21001 versions 4.5 and prior Description A Use of Hard-coded Credentials issue exists, potentially allowing arbitrary code execution when root level access is obtained. This...

10CVSS0.01176EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2022/04/27 12:00 a.m.•20 views

Bender ebee 充电控制器 信任管理问题漏洞

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from the susceptibility to hard-coded credentials. An attacker may be able to use a password to gain administrative access to the Web UI. The following products and version...

9.8CVSS8.3AI score0.01084EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/22 12:00 a.m.•8 views

CVE-2022-26672: Use of Hard-coded Credentials

ASUS WebStorage has a hardcoded API Token in the APP source code. An unauthenticated remote attacker can use this token to establish connections with the server and carry out login attempts to general user accounts. A successful login to a general user account allows the attacker to access, modif...

9.8CVSS8.2AI score0.01198EPSS
SaveExploits0References3
Packet Storm
Packet Storm
•added 2022/04/21 12:00 a.m.•423 views

USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor

!/usr/bin/env python3 USR IOT 4G LTE Industrial Cellular VPN Router 1.0.36 Remote Root Backdoor Vendor: Jinan USR IOT Technology Limited Product web page: https://www.pusr.com | https://www.usriot.com Affected version: 1.0.36 USR-G800V2, USR-G806, USR-G807, USR-G808 1.2.7 USR-LG220-L Summary:...

0.6AI score
SaveExploits0
Rows per page
Query Builder