1353 matches found
CVE-2024-54749
The Ubiquiti U7-Pro wireless remote access point, specifically version 7.0.35 , is affected by a hardcoded password vulnerability located in /etc/shadow. This flaw could potentially allow an attacker to log in as root . The supplier disputes this finding, noting that the password was only identif...
CVE-2024-54745
The WAVLINK WN701AE router (specifically version M01AE_V240305 ) contains a hardcoded password vulnerability in the /etc/shadow file. This issue stems from the incorrect use of standard permissions in the router's microprogramming software. A malicious actor can exploit this flaw to bypass securi...
PT-2024-36411
Name of the Vulnerable Software and Affected Versions WAVLINK WN531P3 version 202383 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with elevated privileges. Recommendations F...
CVE-2024-54745
WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
PT-2024-36412 · Ubiquiti · Ubiquiti U7-Pro
Name of the Vulnerable Software and Affected Versions: Ubiquiti U7-Pro version 7.0.35 Description: A hardcoded password vulnerability was discovered in /etc/shadow, which allows attackers to log in as root. However, the supplier disputes this claim, stating that the device cannot be deployed...
CVE-2024-54747
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54750
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...
CVE-2024-54750
The Ubiquiti U6-LR wireless remote access point, specifically version 6.6.65 , contains a hardcoded password vulnerability in the /etc/shadow file. This flaw allows an attacker to gain root access, providing unauthorized superuser privileges to the system. While Ubiquiti maintains that this does ...
CVE-2024-54747: Incorrect Default Permissions
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2023-51638
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...
CVE-2023-51638
Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...
CVE-2024-52788
Tenda W9 v1.0.0.74456 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-52788
Tenda W9 v1.0.0.74456 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-52789
Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-52789
Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-52788
Tenda W9 v1.0.0.74456 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-52789
Tenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
PT-2024-35441 · Tenda · Tenda W9
Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 Description: The issue is related to a hardcoded password in the /etc ro/shadow file, which allows attackers to log in as root. Recommendations: For Tenda W9 version 1.0.0.74456, consider changing the hardcoded...