Lucene search
+L

113 matches found

OSV
OSV
added 2023/01/05 10:15 p.m.7 views

CVE-2022-3928

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue. This issue affects FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B...

5.5CVSS5.7AI score0.00211EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/01/05 9:50 p.m.13 views

CVE-2022-3928 Hardcoded credential is found in the message queue

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue. This issue affects FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B...

7.1CVSS6.7AI score0.00211EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/01/05 9:50 p.m.37 views

CVE-2022-3928 Hardcoded credential is found in the message queue

Hardcoded credential is found in affected products' message queue. An attacker that manages to exploit this vulnerability will be able to access data to the internal message queue. This issue affects FOXMAN-UN product: FOXMAN-UN R15B, FOXMAN-UN R15A, FOXMAN-UN R14B, FOXMAN-UN R14A, FOXMAN-UN R11B...

7.1CVSS7AI score0.00211EPSS
SaveExploits0References2
CVE
CVE
added 2023/01/05 9:50 p.m.67 views

CVE-2022-3928

CVE-2022-3928 describes a hardcoded credential in the message queue of Hitachi Energy FOXMAN-UN and UNEM products (R9C–R15B). The vulnerability allows an attacker who can exploit it to access data in the internal message queue. Connected advisories and records confirm the affected families (FOXMA...

7.1CVSS6.2AI score0.00211EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2023/01/05 12:00 a.m.11 views

PT-2023-13717 · Unem +1 · Unem +1

Name of the Vulnerable Software and Affected Versions: FOXMANN-UN versions R9C through R15B UNEM versions R9C through R15B Description: A hardcoded credential is found in the affected products' message queue. An attacker that manages to exploit this issue will be able to access data to the intern...

7.1CVSS5.2AI score0.00211EPSS
SaveExploits0References5
Packet Storm
Packet Storm
added 2022/11/16 12:00 a.m.252 views

Backdoor.Win32.Quux MVID-2022-0656 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/13ce53de9ca4c4e6c58f990b442cb419.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Quux Vulnerability: Weak Hardcoded Credentials Family: Quux Type: PE32 MD5:...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/09/26 12:00 a.m.267 views

Backdoor.Win32.Bingle.b MVID-2022-0643 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/eacaa12336f50f1c395663fba92a4d32.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Bingle.b Vulnerability: Weak Hardcoded Credentials Description: The malware...

7.4AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/08/29 12:15 a.m.7 views

CVE-2022-36613

TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

7.8CVSS7.1AI score0.00296EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/10 8:15 p.m.7 views

CVE-2022-35491

TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample...

9.8CVSS5.8AI score0.00815EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/12 12:00 a.m.54 views

Siemens SICAM A8000 Hardcoded Voucher Vulnerability

The SICAM A8000 is used for automation applications in all areas of remote control and energy supply. A hard-coded credentials vulnerability exists in the Siemens SICAM A8000, which can be exploited by an attacker to enable the debug port using default credentials...

8.8CVSS8.6AI score0.00906EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/30 10:15 p.m.12 views

CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

8.8CVSS7.3AI score0.00785EPSS
SaveExploits0References1
NVD
NVD
added 2021/12/30 10:15 p.m.37 views

CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

8.8CVSS0.00785EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/30 10:15 p.m.6 views

CVE-2021-45732

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

8.8CVSS5.8AI score0.00785EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/30 10:15 p.m.27 views

Hardcoded credentials

Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...

6.5CVSS8.5AI score0.00785EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/12/30 9:31 p.m.72 views

CVE-2021-45732

Netgear Nighthawk R6700, firmware 1.0.4.120, is affected by a vulnerability where a hardcoded credential can be exploited to extract the device configuration. By using public tools to obtain the backup configuration, an attacker can repackage and restore it to alter settings not intended to be ma...

8.8CVSS8.6AI score0.00785EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2021/08/11 9:15 p.m.29 views

CVE-2020-25560

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients username: sapphire, password: ims and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server. W...

9.8CVSS0.02129EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/08/11 8:23 p.m.32 views

CVE-2020-25565

In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients username: sapphire, password: ims and gain access to the portal. Once the access is available, the attacker can inject malicious OS commands on “ping”, “traceroute” and “snmp” functions and execute code on the server...

9.8AI score0.02129EPSS
SaveExploits1References2
NVD
NVD
added 2021/07/19 10:15 p.m.19 views

CVE-2020-5349

Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges...

10CVSS0.01234EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/07/19 9:30 p.m.36 views

CVE-2020-5349

Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges...

9.8CVSS9.6AI score0.01234EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/19 9:30 p.m.64 views

CVE-2020-5349

The CVE-2020-5349 case concerns Dell EMC Networking S4100 and S5200 series switches manufactured before February 2020 that contain a hardcoded credential vulnerability. The root cause is a hardcoded credential allowing a remote, unauthenticated attacker to escalate to administrative privileges. I...

10CVSS9.4AI score0.01234EPSS
SaveExploits0References1Affected Software13
Rows per page
Query Builder