Lucene search
+L

5932 matches found

osv_cve
osv_cve
•added 2024/08/08 6:15 p.m.•23 views

CVE-2024-41161

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...

9.8CVSS5.8AI score0.00633EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/08 5:49 p.m.•78 views

CVE-2024-41161

CVE-2024-41161 — Vonets Industrial WiFi Bridge Relays/Repeaters Affected products: Vonets VAR1200-H/L, VAR600-H, VAP11AC/11G-500S/11S, VBG1200, VAR11N-300, VAP11G-300/500, VGA-1000, and related models with software versions 3.3.23.6.9 and prior. Root cause: Use of hard-coded administrator credent...

9.8CVSS8.3AI score0.00633EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/08/08 5:49 p.m.•44 views

CVE-2024-41161 Vonets WiFi Bridges Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...

8.7CVSS0.00633EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/08 5:49 p.m.•29 views

CVE-2024-41161 Vonets WiFi Bridges Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...

8.7CVSS7.7AI score0.00633EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/08 12:00 a.m.•9 views

CVE-2024-41161: Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability affecting Vonets industrial wifi bridge relays and wifi bridge repeaters, software versions 3.3.23.6.9 and prior, enables an unauthenticated remote attacker to bypass authentication using hard-coded administrator credentials. These accounts cannot be...

9.8CVSS7.3AI score0.00633EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•6 views

CVE-2024-41616: Use of Hard-coded Credentials

D-Link DIR-300 REVA FIRMWARE v1.06B05WW contains hardcoded credentials in the Telnet service...

9.8CVSS6.6AI score0.00763EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/08/05 5:15 a.m.•16 views

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

8.8CVSS6.1AI score0.00332EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/05 4:46 a.m.•43 views

Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

Overview ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2024-39838 Incorrect permission assignment for critical resource CWE-732 -...

8.8CVSS6.8AI score0.00332EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2024/08/05 4:35 a.m.•11 views

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

6.6AI score0.00332EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/08/05 4:35 a.m.•52 views

CVE-2024-39838

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

0.00332EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/05 12:00 a.m.•49 views

JVN#70666401: Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN

ZWX-2000CSW2-HN provided by ZEXELON CO., LTD. is a high-speed coaxial modem with wireless LAN functions. ZWX-2000CSW2-HN contains multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Base Score 4.5 CVE-2024-39838 Incorrect...

8.8CVSS8.1AI score0.00332EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/08/05 12:00 a.m.•21 views

Zexeron ZWX-2000CSW2-HN 安全漏洞

The Zexeron ZWX-2000CSW2-HN is a high-speed coaxial modem from Zexeron Corporation of Japan. A security vulnerability exists in the Zexeron ZWX-2000CSW2-HN prior to version 0.3.15, which originates from the use of hard-coded credentials that could allow a network-adjacent attacker with...

8.8CVSS4.9AI score0.00332EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/08/05 12:00 a.m.•10 views

PT-2024-28693 · Unknown · Zwx-2000Csw2-Hn

Name of the Vulnerable Software and Affected Versions: ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 Description: The issue concerns the use of hard-coded credentials in the firmware, which may allow a network-adjacent attacker with administrative privilege to alter the device's...

8.8CVSS4.5AI score0.00332EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/05 12:00 a.m.•4 views

CVE-2024-39838: Use of Hard-coded Credentials

ZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may allow a network-adjacent attacker with an administrative privilege to alter the configuration of the device...

8.8CVSS6.1AI score0.00332EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/02 12:00 a.m.•17 views

Horizon Business Services Caterease 安全漏洞

Horizon Business Services Caterease is an event planning and catering software from Horizon Business Services, USA. A security vulnerability exists in Horizon Business Services Caterease versions 16.0.1.1663 through 24.0.1.2405 and later versions, which stems from hard-coded SQL user credentials ...

7.5CVSS7.4AI score0.0053EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/02 12:00 a.m.•6 views

CVE-2024-33895: Use of Hard-coded Credentials

Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device...

6.6CVSS6AI score0.00515EPSS
SaveExploits2References1
ICS
ICS
•added 2024/08/01 6:00 a.m.•62 views

Vonets WiFi Bridges

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Vonets Equipment : VAR1200-H, VAR1200-L, VAR600-H, VAP11AC, VAP11G-500S, VBG1200, VAP11S-5G, VAP11S, VAR11N-300, VAP11G-300, VAP11N-300, VAP11G, VAP11G-500, VBG1200, VAP11AC, VGA-1000...

10CVSS10AI score0.01705EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/08/01 12:00 a.m.•24 views

PT-2024-5761 · Vonets · Vonets Industrial Wifi Bridge Relays +1

Name of the Vulnerable Software and Affected Versions: Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters versions 3.3.23.6.9 and prior Description: The issue exists due to the presence of hard-coded credentials in the application code. This allows a remote attacker to bypass...

9.8CVSS7.8AI score0.00633EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2024/07/31 12:00 a.m.•22 views

Panasonic WV-S2231L Camera Use of Hard-coded Credentials (CVE-2020-29193)

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

6.8CVSS6.7AI score0.00363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•8 views

CVE-2024-41610: Use of Hard-coded Credentials

D-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01TC contains hardcoded credentials in the Telnet service, enabling attackers to log in remotely to the Telnet service and perform arbitrary commands...

9.8CVSS5.9AI score0.0085EPSS
SaveExploits0References1
Rows per page
Query Builder