CVE-2024-48192

Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...

CVE-2024-48192

CVE-2024-48192 affects Tenda G3 firmware v15.01.0.5(2848_755)_EN. A hardcoded password in the /etc_ro/shadow file allows an attacker to log in as root. The entry lists a high severity (CVSSv3.1: AV Adjacent, AC Low, PR Low, UI None, S Unchanged, C/H/I/A High) with a potential total impact. No rem...

Synology DiskStation Manager Exposure of Sensitive Information to an Unauthorized Actor (CVE-2014-2264)

The OpenVPN module in Synology DiskStation Manager DSM 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

CVE-2023-41610

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...

CVE-2023-41610

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...

CVE-2023-41610

CVE-2023-41610 affects Victure PC420 firmware 1.1.39, where a hardcoded root password is stored in plaintext. The vulnerability is evidenced in multiple sources (NVD/Red Hat/CNNVD/CVE records) describing the presence of a hardcoded administrator credential. There is no documented fix version with...

PT-2024-12944 · Victure · Victure Pc420

Name of the Vulnerable Software and Affected Versions: Victure PC420 version 1.1.39 Description: The issue concerns a hardcoded root password stored in plaintext. Recommendations: For Victure PC420 version 1.1.39, consider changing the hardcoded root password to a unique and secure password as a...

CVE-2021-26138

The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42638

CVE-2024-42638 affects H3C Magic B1ST v100R012. The vulnerability is a hardcoded password in the system file /etc/shadow that permits authentication as root, enabling full administrative access. Public metric data from NVD indicates a CRITICAL (9.8) base score with NETWORK attack vector, no privi...

PT-2024-30089 · H3C · H3C Gr-1100-P

Name of the Vulnerable Software and Affected Versions: H3C GR1100-P version v100R009 Description: The issue is related to a hardcoded password in /etc/shadow, which allows attackers to log in as root. This enables unauthorized access to the system. Recommendations: For H3C GR1100-P version...

CVE-2024-42637

The CVE-2024-42637 entry concerns H3C R3010, version v100R002L02, with a hardcoded password in /etc/shadow that can allow root login. Connected sources (Red Hat and NVD) confirm the same description and add a CVSS 3.1 base score of 9.8 (CRITICAL, NETWORK exploitability, no user interaction). The ...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42637

H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...