CVE-2020-5349

The CVE-2020-5349 case concerns Dell EMC Networking S4100 and S5200 series switches manufactured before February 2020 that contain a hardcoded credential vulnerability. The root cause is a hardcoded credential allowing a remote, unauthenticated attacker to escalate to administrative privileges. I...

CVE-2020-5349

Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges...

Hardcoded Credential Authorization Bypass Vulnerability in Haiwell SCADA

Haiwei Cloud Configuration Software is an industrial automation monitoring and management platform software developed by Xiamen Haiwei Technology Co. A hard-coded credential authorization bypass vulnerability exists in Haiwell SCADA, which can be exploited by an attacker to obtain sensitive...

CVE-2012-6340

NETGEAR WGR614 v7 and v9 are affected by CVE-2012-6340 due to a hardcoded credential used for serial programming, enabling authentication bypass for local attackers. The issue is related to CVE-2006-1002. Affected component: the device firmware implementing serial programming authentication. Root...

Western Digital My Book World II NAS 1.02.12 Hardcoded Credential Vulnerability

Western Digital My Book World II NAS versions 1.02.12 and below have a hard-coded ssh credential that allows for remote command execution. Exploit Title: Western Digital My Book World II NAS = 1.02.12 - Broken Authentication to RCE Google Dork: intitle:"My Book World Edition - MyBookWorld" Exploi...

Western Digital My Book World II NAS 1.02.12 Hardcoded Credential

Exploit Title: Western Digital My Book World II NAS = 1.02.12 - Broken Authentication to RCE Google Dork: intitle:"My Book World Edition - MyBookWorld" Date: 19th Sep, 2019 Exploit Author: Noman Riffat, National Security Services Group NSSG Vendor Homepage: https://wd.com/ Software Link:...

Hardcoded credentials

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; th...

CVE-2017-12574

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; th...

CVE-2017-12574

CVE-2017-12574 affects PLANEX CS-W50HD devices running firmware before 030720. A hardcoded credential, "supervisor:dangerous", was injected into the web authentication database at boot (/.htpasswd), granting attackers full unauthorised control; the account cannot be modified or deleted. Multiple ...

CVE-2017-12574

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; th...

PLANEX CS-W50HD Hardcoded Credential

Reserved CVE: CVE-2017-12574 Description A hidden and undocumented account exists that allows attackers to gain unauthorized access and control the device completely; the account can't be modified or deleted. Vulnerability Type Default user/password Affected Product Code Base Firmware ver 030608...

PLANEX CS-QR20 Hardcoded Credential

Reserved CVE: CVE-2017-12577 Description A hardcoded account / password is used in the Android application that allows attackers to leverage hidden functions and execute arbitrary code on the device. Vulnerability Type Insecure Permissions Affected Product Code Base Firmware ver 1.30 Affected...

CVE-2017-6403

An issue was discovered in Veritas NetBackup Before 8.0 and NetBackup Appliance Before 3.0. NetBackup Cloud Storage Service uses a hardcoded username and password...

Проблемы с паролем MySQL в vpopmail

Пароль жестко вкомпилирован в исполняемый файл и может быть извлечен оттуда...