5870 matches found
CVE-2019-6698: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device...
CVE-2016-10928: Use of Hard-coded Credentials
The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users...
CVE-2019-1935: Use of Hard-coded Credentials
A vulnerability in Cisco Integrated Management Controller IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account scpuser, which has default user...
Security Bulletin: IBM Secure Gateway is affected by two vulnerabilities
Summary Secure Gateway has addressed the following vulnerabilities: CVE-2019-4498 CVE-2019-4499 Vulnerability Details CVEID: CVE-2019-4498 DESCRIPTION: IBM Secure Gateway Service uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio...
Neet AirStream NAS 1.1 Trust Management Issue Vulnerability
The Neet AirStream NAS1.1 is a wireless audio receiver. A vulnerability with trust management issues exists in Neet AirStream NAS1.1. The vulnerability stems from the lack of an effective trust management mechanism in the network system or product. An attacker can exploit default passwords or...
FortiRecorder sets credentials of FortiCameras to static values
An Use of Hard-coded Credentials vulnerability in FortiRecorder may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device...
CVE-2018-20955: Use of Hard-coded Credentials
Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31...
Puzzling Gwmndy Botnet Focuses on Low-Volume Proxy Connections
An odd botnet has been spotted targeting Fiberhome routers, in a quest to add 200 of them per day to its botnet web. That’s a low number in the world of botnets, according to 360 Netlab researchers, which observed a previously unknown malware strain called Gwmndy after the attackers’ domain name...
CVE-2019-12797: Use of Hard-coded Credentials
A clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary commands to an OBD-II bus of a vehicle...
CVE-2019-12327: Use of Hard-coded Credentials
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed...
CVE-2019-9229: Use of Hard-coded Credentials
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers...
CVE-2019-1919: Use of Hard-coded Credentials
A vulnerability in the Cisco FindIT Network Management Software virtual machine VM images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account...
Odoo Trust Management Issues Vulnerabilities
Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. A trust managemen...
CVE-2019-13399: Use of Hard-coded Credentials
Dynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an administrator's SSL conversation...
CVE-2019-13352: Use of Hard-coded Credentials
WolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating support PINs for the 'forgot password' feature. By knowing this static secret and the corresponding algorithm for calculating support PINs, an attacker can reset the ADMIN password and thus gain remote...
CVE-2018-14528: Use of Hard-coded Credentials
Invoxia NVX220 devices allow TELNET access as admin with a default password...
CVE-2017-8226: Use of Hard-coded Credentials
Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in the firmware and can be extracted by anyone who reverses the firmware to identify them. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
