CVE-2020-24056

CVE-2020-24056 describes a hardcoded credentials vulnerability affecting Verint devices: 5620PTZ (Verint_FW_0_42), 4320 (V4320_FW_0_23, 0_31), and S5120FD (Verint_FW_0_42units). The root cause is hardcoded credentials stored on affected firmware, enabling confidentiality breaches via FTP, Telnet,...

CVE-2020-24053

The CVE-2020-24053 entry concerns Moog EXO Series devices EXVF5C-2 and EXVP7C2-3 with hardcoded credentials that could expose confidentiality when using FTP, Telnet, or SSH. Root cause is a hardcoded credential vulnerability. Connected sources confirm the affected models and access vectors but do...

CVE-2020-24053

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols...

Seowon SlC 130 Router Remote Code Execution

Exploit Title: Seowon SlC 130 Router - Remote Code Execution Author: maj0rmil4d - Ali Jalalat Author website: https://secureguy.ir Date: 2020-08-20 Vendor Homepage: seowonintech.co.kr Software Link: http://www.seowonintech.co.kr/en/product/detail.asp?num=150&bigkind=B05&middlekind=B0529 CVE:...

Seowon SlC 130 Router - Remote Code Execution

Exploit Title: Seowon SlC 130 Router - Remote Code Execution Author: maj0rmil4d - Ali Jalalat Author website: https://secureguy.ir Date: 2020-08-20 Vendor Homepage: seowonintech.co.kr Software Link: http://www.seowonintech.co.kr/en/product/detail.asp?num=150&bigkind=B05&middlekind=B0529 CVE:...

PT-2020-15633

Name of the Vulnerable Software and Affected Versions Verint 5620PTZ version Verint FW 0 42 Verint 4320 versions V4320 FW 0 23 through V4320 FW 0 31 Verint S5120FD version Verint FW 0 42 Description A hardcoded credentials issue exists, potentially causing confidentiality issues when using FTP,...

PT-2020-15630

Name of the Vulnerable Software and Affected Versions Moog EXO Series EXVF5C-2 and EXVP7C2-3 units affected versions not specified Description The issue concerns a hardcoded credentials vulnerability, which could lead to confidentiality issues when using the FTP, Telnet, or SSH protocols...

Hardcoded credentials

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key...

Hardcoded credentials

IBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 181395...

CVE-2019-20025

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...

Hardcoded credentials

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...

CVE-2019-20025

NEC SV9100 PBX is affected (software release 6.0 and later). The root cause is an undocumented user account with manufacturer privileges, enabling an unauthenticated, remote attacker to log in using a hardcoded username/password. Impact per sources: attacker could remotely log in with manufacture...

PT-2020-10318

Name of the Vulnerable Software and Affected Versions NEC SV9100 software versions 6.0 and higher Description The issue is due to an undocumented user account with manufacturer privilege level, allowing an unauthenticated, remote attacker to log into a device running an affected release with a...

CVE-2019-20025: Use of Hard-coded Credentials

Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...

Hardcoded credentials

An issue was discovered in Pulse Policy Secure PPS and Pulse Connect Secure PCS Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping into a root shell in a pre-install phase where the entire source code of the appliance is available and...

IBM Verify Gateway (IVG) Hardcoded Credentials Vulnerability

IBM Verify Gateway IVG is a cloud-based authentication solution from IBM in the United States. A hard-coded credentials vulnerability exists in IBM Verify Gateway IVG. An attacker could exploit the vulnerability to obtain credentials such as passwords or encryption keys...

Hardcoded credentials

Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-10287 RVD#3326: Hardcoded default credentials on IRC 5 OPC Server

The IRC5 family with UAS service enabled comes by default with credentials that can be found on publicly available manuals. ABB considers this a well documented functionality that helps customer set up however, out of our research, we found multiple production systems running these exact default...

PT-2020-3116 · Cisco · Cisco Sd-Wan Solution

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Solution Software affected versions not specified Description: The issue is related to the use of hardcoded credentials in the Cisco SD-WAN solution. An unauthenticated, local attacker could access an affected device by using an...

CDATA OLTs Backdoor / Privilege Escalation / Information Disclosure Vulnerabilities

Various CDATA OLTs suffer from backdoor access with telnet, credential leaks, shell escape with root privileges, denial of service, and weak encryption algorithm vulnerabilities. Advisory Information Title: Multiple vulnerabilities found in CDATA OLTs Advisory URL:...