CVE-2019-13352: Use of Hard-coded Credentials

WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote...

CVE-2018-14528: Use of Hard-coded Credentials

Invoxia NVX220 devices allow TELNET access as admin with a default password...

CVE-2017-8226: Use of Hard-coded Credentials

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2019-7261

The CVE-2019-7261 entry affects Nice/Nortek Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The root cause is hard-coded credentials, including SSH access to root with embedded credentials, enabling full system compromise. Impact described across sources: remote access with high c...

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2017-8415: Use of Hard-coded Credentials

An issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet daemon as a part of the busybox and retrieves the password from the shadow file using the function getspnam at address 0x00053894. Then performs a crypt operation on the password retrieved from the use...

PT-2019-18491 · Linear · Linear Emerge E3-Series

Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue concerns hard-coded credentials in the Linear eMerge E3-Series devices. Recommendations: At the moment, there is no information about a newer version that...

FaceSentry Access Control System 6.4.8 - Remote SSH Root Exploit

Exploit for hardware platform in category web applications !/usr/bin/env python -- coding: utf-8 -- FaceSentry Access Control System 6.4.8 Remote SSH Root Access Exploit Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7....

CVE-2019-7265: Use of Hard-coded Credentials

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

CVE-2019-7261: Use of Hard-coded Credentials

Linear eMerge E3-Series devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices have Hard-coded Credentials...

CVE-2019-7279

Optergy Proton/Enterprise devices are affected by CVE-2019-7279, which involves hard-coded credentials in the system. The issue impacts Proton/Enterprise software (versions 2.3.0a and earlier) and is identified as Use of Hard-Coded Credentials (CWE-798). The NVD entry assigns CVSSv3 base score 7....

CVE-2019-10979: Use of Hard-coded Credentials

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password...

CVE-2019-7279: Use of Hard-coded Credentials

Optergy Proton/Enterprise devices have Hard-coded Credentials...

FaceSentry Access Control System 6.4.8 - Remote SSH Root

!/usr/bin/env python -- coding: utf-8 -- FaceSentry Access Control System 6.4.8 Remote SSH Root Access Exploit Vendor: iWT Ltd. Product web page: http://www.iwt.com.hk Affected version: Firmware 6.4.8 build 264 Algorithm A16 Firmware 5.7.2 build 568 Algorithm A14 Firmware 5.7.0 build 539 Algorith...

SICK MSC800

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SICK Equipment: MSC800 Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a low-skilled remote attacker to reconfigure...