1353 matches found
CVE-2024-52788
The Tenda W9 wireless in-wall access point, specifically version v1.0.0.7(4456) , contains a hardcoded password vulnerability located in the /etc_ro/shadow file. This flaw allows an attacker to gain unauthorized root access to the device. To remediate this, it is recommended to change the hardcod...
CVE-2024-50593 Hardcoded Service Password
An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software...
HASOMED Elefant 安全漏洞
HASOMED Elefant is an exercise software from the German company HASOMED. It specializes in meeting the needs of psychotherapists, child and adolescent psychotherapists, and medical psychotherapists. HASOMED Elefant has a security vulnerability. An attacker with local access to a medical office...
CVE-2024-48192
Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-48192
Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
PT-2024-33017 · Tenda · Tenda G3
Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.01.0.52848 755 EN Description: A hardcoded password vulnerability was discovered in the /etc ro/shadow file, which allows attackers to log in as root. This issue exists in the Tenda G3 firmware, specifically affecting the...
CVE-2024-48192
Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-48192
Tenda G3 v15.01.0.52848755EN was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
CVE-2024-48192
The Tenda G3 wireless access point (version 15.01.0.5(2848_755)_EN ) contains a hardcoded password vulnerability within the /etc_ro/shadow file. This flaw allows an attacker to bypass existing security restrictions and log in with root privileges , potentially leading to the theft of sensitive in...
Synology DiskStation Manager Exposure of Sensitive Information to an Unauthorized Actor (CVE-2014-2264)
The OpenVPN module in Synology DiskStation Manager DSM 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610: Plaintext Storage of a Password
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610
The Victure PC420 smart camera, specifically version 1.1.39 , contains a security vulnerability where a root password is hardcoded and stored in plaintext . This flaw allows unauthorized access to the device with high impact on confidentiality, integrity, and availability. No official patch is cu...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
PT-2024-12944 · Victure · Victure Pc420
Name of the Vulnerable Software and Affected Versions: Victure PC420 version 1.1.39 Description: The issue concerns a hardcoded root password stored in plaintext. Recommendations: For Victure PC420 version 1.1.39, consider changing the hardcoded root password to a unique and secure password as a...
CVE-2021-26138
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...