339 matches found
CVE-2020-14099
On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...
CVE-2020-14099
On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...
Helpcom 信任管理问题漏洞
Helpcom is an application from the Korean company Helpcom. It provides remote control services. A security vulnerability exists in versions prior to Helpcom v10.0 that stems from storing hard-coded encryption keys. No detailed vulnerability details are provided at this time...
CVE-2020-10210
Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...
Konzept-iX PubliXone Information Disclosure Vulnerability
Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. PubliXone 2019.045 suffers from an information disclosure vulnerability that can cause cross-site scripting, account takeover, lack of access control, hard-coded keys, and file download...
Konzept-iX PubliXone Information Disclosure Vulnerability (CNVD-2020-60716)
Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. An information disclosure vulnerability exists in Konzept-iX PubliXone version 2019.045, which exposes PubliXone to cross-site scripting, account takeover, lack of access control, hard-cod...
Konzept-iX PubliXone Cross-Site Scripting Vulnerability
Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. A cross-site scripting vulnerability exists in Konzept-iX PubliXone version 2019.045, which exposes PubliXone to cross-site scripting, account takeover, lack of access control, hard-coded...
Konzept-iX PubliXone Encryption Problem Vulnerability
Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. Konzept-iX PubliXone version 2019.045 suffers from an encryption issue vulnerability that causes PubliXone to suffer from cross-site scripting, account takeover, lack of access control,...
Konzept-iX PubliXone Authorization Issues Vulnerability
Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. PubliXone 2019.045 suffers from a security vulnerability that can cause cross-site scripting, account takeover, lack of access control, hard-coded keys, and file download distress. No...
Fortinet FortiClient Trust Management Issue Vulnerability
Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient...
CVE-2016-11058
The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs...
Cellebrite UFED Trust Management Issue Vulnerability
Cellebrite UFED is a universal forensic product from Cellebrite Israel. The product is mainly used for data extraction, transmission and analysis of devices. A trust management issue vulnerability exists in Cellebrite UFED versions 5.0 through 7.29, which arises from authentication of the ADB...
TP-Link Archer Code Execution Vulnerability
The TP-Link Archer A7 AC1750 is a wireless router from China P&L TP-Link. A security vulnerability exists in the tdpServer service in the TP-Link Archer A7 using firmware version 190726 AC1750, which stems from the program's use of hard-coded encryption keys. An attacker could exploit the...
CVE-2019-5137
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13...
Hardcoded credentials
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13...
Fortinet FortiOS and Fortinet FortiClient Trust Management Issues Vulnerability
Fortinet FortiOS and Fortinet FortiClient are both products of the U.S. company Fita Fortinet.Fortinet FortiOS is a set of security operating system dedicated to the FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and...
CVE-2015-7276
Technicolor C2000T and C2100T uses hard-coded cryptographic keys...
PT-2019-13868 · Inea · Me-Rtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric Europe B.V. ME-RTU devices versions 2.02 and earlier INEA ME-RTU devices versions 3.0 and earlier Description: An issue allows an attacker to gain unauthorized access or disclose encrypted data on the RTU due to hard-coded...
The vulnerabilities of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the virtual machines used for setting up and controlling wired and wireless networks by Cisco FindIT Network Probe, allow attackers to increase their privileges.
The vulnerability of the microprogramming software for Cisco Small Business routers of the 250, 350, 350X, 550X series, as well as the Cisco FindIT Network Probe software for configuring and controlling wired and wireless networks, is related to the presence of a hard-coded pair of open/closed ke...