Lucene search
+L

1166 matches found

Cvelist
Cvelist
added 2021/11/09 10:45 p.m.39 views

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

6.5AI score0.00323EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.10 views

Ets5 Password Recovery 信任管理问题漏洞

Ets5 Password Recovery is an open source Poc for CVE-2021-36799 by Robert Gutzkow Individual Developer. Ets5 Password Recovery suffers from a trust management issue vulnerability that stems from the software's use of the hard-coded password ETS5Password with a salt value of Ivan Medvedev, which...

8.8CVSS6.7AI score0.00418EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/11/09 12:00 a.m.7 views

PT-2021-23880 · Knx Ets · Knx Ets

Name of the Vulnerable Software and Affected Versions: KNX ETS versions 6.0.0 and earlier Description: The issue allows local users to read project information due to the use of a hard-coded password ETS5Password with a salt value of Ivan Medvedev. This is similar to a previously identified issue...

5.5CVSS6.7AI score0.00323EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2021/11/01 12:00 a.m.5 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS7.2AI score0.01036EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/12 2:15 p.m.8 views

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS7.5AI score0.01184EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/12 2:15 p.m.23 views

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS0.01184EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/10/12 1:37 p.m.29 views

CVE-2021-38456 Moxa MXview Network Management Software

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS9.8AI score0.01184EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/05 8:03 p.m.6 views

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS7.3AI score0.01184EPSS
SaveExploits0References2Affected Software1
ICS
ICS
added 2021/10/05 12:00 a.m.106 views

Moxa MXview Network Management Software

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Moxa Equipment: MXview Network Management Software Vulnerabilities: Path Traversal, Use of Hard-coded Password, Unprotected Transport of Credentials, Injection, Improper Access Control 2. RISK...

10CVSS9.9AI score0.15789EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/05 12:00 a.m.12 views

Moxa Mxview Network Management Software 信任管理问题漏洞

Moxa MXview is a network management software used to monitor and diagnose industrial networks.Moxa MXview is vulnerable to a hard-coded password vulnerability. An attacker could exploit this vulnerability to gain access through an account using the default password...

9.8CVSS8.7AI score0.01184EPSS
SaveExploits0References5
ICS
ICS
added 2021/08/03 12:00 a.m.70 views

Swisslog Healthcare Translogic PTS

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Swisslog Healthcare Equipment: Translogic PTS Pneumatic Tube Systems Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Improper Authentication, Download of Code without...

10CVSS10AI score0.08227EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2021/08/03 12:00 a.m.90 views

D-Link DIR-3040 < 1.13B03 Hotfix Multiple Vulnerabilities - Active Check

D-Link DIR-3040 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink"; if...

10CVSS6.1AI score0.32385EPSS
SaveExploits8References6
NVD
NVD
added 2021/07/28 12:15 a.m.23 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS0.01064EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/28 12:15 a.m.12 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS5.8AI score0.01064EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/28 12:05 a.m.33 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS7.8AI score0.01064EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/28 12:05 a.m.67 views

CVE-2020-5351

Dell EMC Data Protection Advisor (versions 6.4, 6.5, and 18.1) contains an undocumented account protected by a hard-coded password. A remote unauthenticated attacker who knows the password can log in and gain read‑only privileges. This is supported by multiple sources in the connected documents (...

7.5CVSS7.8AI score0.01064EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/07/28 12:00 a.m.17 views

PT-2021-12397 · Dell Emc · Dell Emc Data Protection Advisor

Name of the Vulnerable Software and Affected Versions: Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 Description: The issue concerns an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with knowledge o...

7.5CVSS7.8AI score0.01064EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/07/27 12:00 a.m.14 views

Dell EMC Data Protection Advisor 安全漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery, and data replication management. A security vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1, which arises from the affect...

7.5CVSS7.3AI score0.01064EPSS
SaveExploits0References2
seebug.org
seebug.org
added 2021/07/22 12:00 a.m.250 views

D-LINK DIR-3040 Zebra IP 路由管理器信息泄露漏洞(CVE-2021-21817)

The DIR-3040 is an AC3000-based wireless internet router. Zebra is an IP routing manager that provides kernel routing table updates, interface lookups, and redistribution of routes between different routing protocols. The DIR-3040 runs this service by default on TCP port 2601 and can be accessed ...

5CVSS7.5AI score0.02013EPSS
SaveExploits2
OSV
OSV
added 2021/07/21 3:15 p.m.12 views

CVE-2021-22729

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker to...

9.8CVSS5.8AI score0.0176EPSS
SaveExploits0References1
Rows per page
Query Builder