Lucene search
+L

5932 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/26 12:00 a.m.•4 views

CVE-2024-5460: Use of Hard-coded Credentials

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS8.2AI score0.00542EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/25 2:15 a.m.•36 views

CVE-2023-6198

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

9.3CVSS0.00358EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/25 1:34 a.m.•57 views

CVE-2023-6198

The CVE-2023-6198 entry describes a Hard-coded Credential vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules). The issue enables unauthorized access to the device due to hard-coded credentials used by the appliance, as summarized in multiple sources (NVD/Red Hat/CVE...

9.3CVSS9.3AI score0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/25 1:34 a.m.•19 views

CVE-2023-6198 Hard Coded Credential

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

9.3CVSS6.9AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/25 1:34 a.m.•39 views

CVE-2023-6198 Hard Coded Credential

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

9.3CVSS0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/25 12:00 a.m.•14 views

Baicells Snap Router Security Vulnerability

Baicells Snap Router is a series of routers from Baicells USA. A security vulnerability exists in Baicells Snap Router BaiCEBMI EP3011, which stems from a hard-coded credentials vulnerability in the application that allows unauthorized access to the device...

9.3CVSS6.7AI score0.00358EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•4 views

CVE-2023-6198: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

9.3CVSS5.8AI score0.00358EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/25 12:00 a.m.•3 views

PT-2024-14898

Name of the Vulnerable Software and Affected Versions Baicells Snap Router BaiCE BMI on EP3011 affected versions not specified Description The issue concerns the use of hard-coded credentials in the User Passwords modules, allowing unauthorized access to the device. This could potentially lead to...

9.3CVSS5.8AI score0.00358EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/24 12:00 a.m.•8 views

CVE-2024-36496: Use of Hard-coded Credentials

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...

7.5CVSS5.8AI score0.00693EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/06/21 12:00 a.m.•37 views

Streamline NX Client < 3.4.3.2 / 3.5.x < 3.5.1.202 / 3.6.x < 3.6.2.2 / 3.7.x < 3.7.2.1 Privilege Escalation (2024-000005)

The version of Streamline NX Client installed on the remote host is prior to 3.4.3.2, 3.5.1.202, 3.6.2.2, or 3.7.2.1. It is, therefore, affected by a vulnerability as referenced in the 2024-000005 advisory. - Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 an...

9.8CVSS6.6AI score0.00434EPSS
SaveExploits0References3
NVD
NVD
•added 2024/06/19 7:15 a.m.•36 views

CVE-2024-36480

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

9.8CVSS0.00434EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/19 6:40 a.m.•19 views

CVE-2024-36480

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

7.2AI score0.00434EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/19 6:40 a.m.•42 views

CVE-2024-36480

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

0.00434EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/19 12:00 a.m.•7 views

CVE-2024-36480: Use of Hard-coded Credentials

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

9.8CVSS6.6AI score0.00434EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/19 12:00 a.m.•14 views

PT-2024-27022 · Ricoh · Ricoh Streamline Nx Pc Client

Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client versions 3.7.2 and earlier Description: The issue is related to the use of hard-coded credentials. If exploited, an attacker may obtain the LocalSystem Account of the PC where the product is installed, potentiall...

9.8CVSS6.8AI score0.00434EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/18 5:56 a.m.•21 views

Multiple vulnerabilities in Ricoh Streamline NX PC Client

Overview Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. ricoh-2024-000004 Improper restriction of communication channel to intended endpoints CWE-923 - CVE-2024-36252 ricoh-2024-000005 Use of hard-coded credentials CWE-798 -...

9.8CVSS7.2AI score0.00507EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/06/18 12:00 a.m.•16 views

Ricoh Streamline NX PC Client Security Vulnerability

Ricoh Streamline NX PC Client is a document management PC client application from Ricoh Japan. A security vulnerability exists in Ricoh Streamline NX PC Client version 3.7.2 and earlier versions, which stems from the use of hard-coded credentials...

9.8CVSS6.8AI score0.00434EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/18 12:00 a.m.•44 views

JVN#00442488: Multiple vulnerabilities in Ricoh Streamline NX PC Client

Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Improper restriction of communication channel to intended endpoints CWE-923 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2024-36252 ricoh-2024-000004 Use of hard-coded...

9.8CVSS7.3AI score0.00507EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/17 6:21 a.m.•148 views

Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs

Overview MFPs multifunction printers provided by Toshiba Tec Corporation and Oki Electric Industry Co., Ltd. contain multiple vulnerabilities listed below. Improper Restriction of Recursive Entity References in DTDs 'XML Entity Expansion' CWE-776 - CVE-2024-27141, CVE-2024-27142 Execution with...

9.8CVSS7.5AI score0.26811EPSS
SaveExploits2References65
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/16 12:00 a.m.•4 views

CVE-2024-38466: Use of Hard-coded Credentials

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder