Lucene search
+L

5875 matches found

Prion
Prion
•added 2021/12/08 1:15 p.m.•29 views

Hardcoded credentials

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering...

5CVSS7.4AI score0.01121EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•5 views

CVE-2021-26108: Use of Hard-coded Credentials

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering...

7.5CVSS5.8AI score0.01121EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•8 views

CVE-2021-43044: Use of Hard-coded Credentials

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community...

9.8CVSS5.8AI score0.01923EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•7 views

CVE-2021-43282: Use of Hard-coded Credentials

An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller...

6.5CVSS5.8AI score0.0063EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•4 views

CVE-2021-43284: Use of Hard-coded Credentials

An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its default value of admin. This enables an attacker to gain control of the device through SSH regardless of whether the admin password was changed on the web interface...

7.8CVSS5.8AI score0.00391EPSS
SaveExploits1References2
OSV
OSV
•added 2021/11/26 5:15 p.m.•17 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.8AI score0.01164EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/11/26 5:15 p.m.•13 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS8.5AI score0.01164EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/11/26 5:15 p.m.•26 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS0.01164EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/26 4:31 p.m.•39 views

CVE-2021-26611 HejHome IP Camera use of hard-coded credentials vulnerability

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

8.1CVSS9.6AI score0.01164EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/26 4:31 p.m.•67 views

CVE-2021-26611

CVE-2021-26611 affects the HejHome GKW-IC052 IP Camera, where hard-coded credentials enable remote attackers to operate the device (reboot, factory reset, snapshot, etc.). The available sources consistently describe this as a hard-coded credentials vulnerability impacting the IP camera, treated a...

9.8CVSS8.9AI score0.01164EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/26 12:00 a.m.•2 views

PT-2021-17078

Name of the Vulnerable Software and Affected Versions HejHome GKW-IC052 IP Camera affected versions not specified Description The issue allows remote attackers to operate the IP Camera, enabling actions such as reboot, factory reset, and snapshot. This is due to a hard-coded credentials...

9.8CVSS0.01164EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/26 12:00 a.m.•7 views

CVE-2021-26611: Use of Hard-coded Credentials

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.9AI score0.01164EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/11/18 3:34 p.m.•8 views

CVE-2021-32993

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

8.8CVSS7AI score0.00272EPSS
SaveExploits0References2
ICS
ICS
•added 2021/11/18 12:00 a.m.•45 views

Philips IntelliBridge EC 40 and EC 80 Hub

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: Philips Equipment: IntelliBridge EC 40 and EC 80 Hub Vulnerabilities: Use of Hard-coded Credentials, Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of these...

8.8CVSS9.2AI score0.00453EPSS
SaveExploits0References5
OSV
OSV
•added 2021/11/10 4:15 p.m.•17 views

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

10CVSS5.8AI score0.01141EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/11/10 4:15 p.m.•9 views

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

10CVSS7.3AI score0.01141EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/10 12:00 a.m.•5 views

CVE-2021-43136: Use of Hard-coded Credentials

An authentication bypass issue in FormaLMS = 2.4.4 allows an attacker to bypass the authentication mechanism and obtain a valid access to the platform...

9.8CVSS5.8AI score0.15725EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2021/11/10 12:00 a.m.•7 views

PT-2021-22916

Name of the Vulnerable Software and Affected Versions Airangel HSMX Gateway devices versions 5.2.04 and earlier Description The issue concerns hard-coded database credentials in the affected devices. This could potentially allow unauthorized access to the database. Recommendations For Airangel HS...

10CVSS0.01141EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/10 12:00 a.m.•4 views

CVE-2021-40519: Use of Hard-coded Credentials

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

10CVSS5.7AI score0.01141EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•17 views

Airangel Hsmx Gateway 信任管理问题漏洞

Airangel Hsmx Gateway is a platform from Airangel UK, Inc. A hard-coded credential vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from the use of PostgreSQL database credentials hard-coded in the configuration file. An attacker could steal this credential t...

10CVSS5.6AI score0.01141EPSS
SaveExploits1References3
Rows per page
Query Builder