3907 matches found
Hard-coded credentials in Technicolor TG670 DSL gateway router
Overview The Technicolor TG670 DSL Gateway Router includes a hard-coded service account that allows for authentication over services on the WAN interface, using HTTP, SSH, or TELNET. The authenticated user can use it to gain full administrative control of the router. Description A hard-coded...
CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1
SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...
CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2
SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes...
CVE-2023-35987
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...
Hardcoded credentials
PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...
CVE-2023-35987
CVE-2023-35987 concerns hard-coded credentials in PiiGAB M-Bus authentication. The vulnerability affects the M-Bus SoftwarePack 900S product family and is described in multiple sources (ICS/CISA advisory and CVE records). Root cause: hard-coded credentials used for authentication, enabling remote...
Exploit for Use of Hard-coded Credentials in Clickstudios Passwordstate
CVE-20...
PiiGAB M-Bus
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...
PiiGAB M-Bus 900S 信任管理问题漏洞
PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A vulnerability with trust management issues exists in PiiGAB M-Bus version 900S, which stems from the inclusion of hard-coded credentials for authentication...
PT-2023-25405 · Unknown · Piigab M-Bus
Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns hard-coded credentials used for authentication in PiiGAB M-Bus. No information is provided about the estimated number of potentially affected devices or real-world...
CVE-2023-34473
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473 Usage of Hard-coded Credentials
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473 Usage of Hard-coded Credentials
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473
AMI SPx BMC contains a vulnerability (CVE-2023-34473) where a valid user can cause the use of hard-coded credentials. Consequences may include loss of confidentiality, integrity, and availability. Exploitation details are not provided in the sources; no remediation/version fix is specified in the...
Authentication Bypass
sphinx is vulnerable to Authentication Bypass. This vulnerability exists in the use of hard-coded credentials, which enables a local attacker to utilize the default password and bypass the login...
AMI MegaRAC 信任管理问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...
VulnCheck KEV: CVE-2010-1573
Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp...
PT-2023-24899 · Ami · Ami Spx
Name of the Vulnerable Software and Affected Versions: AMI SPx affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI SPx, where a valid user can cause the use of hard-coded credentials. This may lead to a loss of confidentiality, integrity, and...