CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

JVN#70666401: Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Base Score 4.5 CVE-2024-39838 Incorrect...

Zexeron ZWX-2000CSW2-HN 安全漏洞

The Zexeron ZWX-2000CSW2-HN is a high-speed coaxial modem from Zexeron Corporation of Japan. A security vulnerability exists in the Zexeron ZWX-2000CSW2-HN prior to version 0.3.15, which originates from the use of hard-coded credentials that could allow a network-adjacent attacker with...

PT-2024-28693 · Unknown · Zwx-2000Csw2-Hn

Name of the Vulnerable Software and Affected Versions: ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 Description: The issue concerns the use of hard-coded credentials in the firmware, which may allow a network-adjacent attacker with administrative privilege to alter the device's...

Horizon Business Services Caterease 安全漏洞

Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from hard-coded SQL user credentials ...

Vonets WiFi Bridges

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Vonets Equipment : VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000...

PT-2024-5761 · Vonets · Vonets Industrial Wifi Bridge Relays +1

Name of the Vulnerable Software and Affected Versions: Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters versions 3.3.23.6.9 and prior Description: The issue exists due to the presence of hard-coded credentials in the application code. This allows a remote attacker to bypass...

Panasonic WV-S2231L Camera Use of Hard-coded Credentials (CVE-2020-29193)

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

CVE-2024-41689 Hard-coded Credentials Vulnerability

This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to unencrypted storing of WPA/ WPS credentials within the router's firmware/ database. An attacker with physical access could exploit this by extracting the firmware and reverse engineer the binary data to access the plaintext WP...

PT-2024-37952 · Perkinelmer +1 · Perkinelmer Processplus +1

Name of the Vulnerable Software and Affected Versions: PerkinElmer ProcessPlus versions through 1.11.6507.0 Description: The issue is related to the use of hard-coded MSSQL credentials in PerkinElmer ProcessPlus on Windows, allowing an attacker to login and potentially remove data on all prone...

D-Link DAP-2622 Hardcoded Credential Authentication Bypass Vulnerability

The D-Link DAP-2622 is a wireless access point AP from D-Link designed for wireless network coverage in an enterprise or commercial environment. The D-Link DAP-2622 suffers from a hard-coded credential authentication bypass vulnerability that originates from the Telnet command line interface usin...

The vulnerability of the installation file initSetup_v2.0.sh, a configuration migration tool for Expedition, allows a perpetrator to gain increased privileges.

The vulnerability of the initSetupv2.0.sh file, a configuration migration tool for Expedition, lies in the use of hard-coded credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

LumisXP 16.1.x Hardcoded Credentials / IDOR

===== Tempest Security Intelligence - ADV-6/2024 ========================== LumisXP v15.0.x to v16.1.x Author: Rodolfo Tavares Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents================================================== Overview Detailed description Timeli...

CVE-2024-28747

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747 ifm: Use of Hard-coded Credentials

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747 ifm: Use of Hard-coded Credentials

An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges...

CVE-2024-28747

CVE-2024-28747 affects SmartSPS devices (ifm electronic) with unauthenticated remote access via hard-coded credentials, enabling high-privilege control. Multiple sources describe the issue as a trust/credential management problem enabling remote, unauthenticated access to SmartSPS devices. The NV...

PT-2024-22555 · Smartsps · Smartsps

Name of the Vulnerable Software and Affected Versions: SmartSPS devices affected versions not specified Description: An unauthenticated remote attacker can use the hard-coded credentials to access the SmartSPS devices with high privileges. Recommendations: At the moment, there is no information...

ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS Trust Management Issue Vulnerability

The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are both a series of hosts/gateways from ifm electronic Germany. A trust management issue vulnerability exists in ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS versions 4.3.17 and earlier, which originat...