CVE-2014-2350: Use of Hard-coded Credentials

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program...

PT-2014-1222

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 10.3.1 through 12.3 Description The issue is related to errors that occur when changing access control rules through the Telnet protocol, allowing an attacker to gain access to applications via Telnet to run commands or...

Seagate BlackArmor NAS - Multiple Vulnerabilities

Seagate BlackArmor NAS - Multiple Vulnerabilities Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS devices...

Seagate BlackArmor NAS - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS...

CVE-2014-2751

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2752

SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

Hardcoded credentials

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

Hardcoded credentials

SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2751

Technical details about CVE-2014-2751 are not publicly provided in the supplied documents. Monitor for updates from SAP advisories and CVE records.

CVE-2014-2752

The CVE-2014-2752 entry concerns SAP Business Object Processing Framework (BOPF) for ABAP with hardcoded credentials in its deployment. The concrete detail provided across sources identifies the affected component as BOPF for ABAP and the root cause as hardcoded credentials, enabling remote acces...

CVE-2014-2752

SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2751

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2751: Undefined Security Weakness

SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-2752: Undefined Security Weakness

SAP Business Object Processing Framework BOPF for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

Hardcoded credentials

The OpenVPN module in Synology DiskStation Manager DSM 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session...

Hardcoded credentials

An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click...

Hardcoded credentials

The Belkin WeMo Home Automation firmware before 3949 has a hardcoded GPG key, which makes it easier for remote attackers to spoof firmware updates and execute arbitrary code via crafted signed data...

Hardcoded credentials

The control-plane access-list implementation in Cisco IPS Software before 7.18p2E4 and 7.2 before 7.22E4 allows remote attackers to cause a denial of service MainApp process outage via crafted packets to TCP port 7000, aka Bug ID CSCui67394...

Hardcoded credentials

Cisco UCS Director formerly Cloupia before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930...

CVE-2013-5400

An unspecified servlet in IBM Platform Symphony Developer Edition DE 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local environment" access via unknown vectors...