CVE-2019-10920

A vulnerability has been identified in LOGO! 8 BM incl. SIPLUS variants All versions V8.3. Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker wi...

PT-2019-2287

Name of the Vulnerable Software and Affected Versions LOGO! 8 BM incl. SIPLUS variants versions prior to V8.3 Description A security issue has been identified where project data stored on the device can be decrypted due to a hardcoded encryption key. This data is accessible via port 10005/tcp. An...

Schneider Electric Trio J-Series License Free Ethernet Radio 3.6.0 <= 3.6.3 Hardcoded Encryption Key

Binary data 720035.prm...

GE Multilink Swtiches Hardcoded Encryption Key

Binary data 720053.prm...

CVE-2018-9073

Lenovo Chassis Management Module CMM prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets...

CVE-2018-9073: Use of Hard-coded Credentials

Lenovo Chassis Management Module CMM prior to version 2.0.0 utilizes a hardcoded encryption key to protect certain secrets. Possession of the key can allow an attacker that has already compromised the server to decrypt these secrets...

PT-2018-18834

Name of the Vulnerable Software and Affected Versions Lenovo Chassis Management Module CMM versions prior to 2.0.0 Description The issue concerns the use of a hardcoded encryption key in the Lenovo Chassis Management Module CMM. This key is used to protect certain secrets. If an attacker obtains...

CMM Security Concerns - US

Lenovo Security Advisory: LEN-23806 Potential Impact: Information Disclosure; Hardcoded Encryption Key Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9071, CVE-2018-9073 Summary: In a recent internal audit, Lenovo identified potential security vulnerabilities in the...

CMM Security Concerns - Lenovo Support US

No description provided...

MensaMax 4.3 Hardcoded Encryption Key Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 e2 Security GmbH Advisory 2018-01 Unencrypted transmission and usage of hardcoded encryption key Overview Advisory ID: E2SA-2018-01 Advisory Version: 1.0 Advisory Status: Public Advisory URL: https://advisories.e2security.de/2018/E2SA-2018-01.txt...

PT-2018-13952

Name of the Vulnerable Software and Affected Versions PTC ThingWorx Platform versions 6.5 through 8.2 Description An issue was discovered in the PTC ThingWorx Platform. There is a hardcoded encryption key. Recommendations For PTC ThingWorx Platform versions 6.5 through 8.2, consider updating to a...

CVE-2016-3953

The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function...

CVE-2016-3953

The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function...

CVE-2016-3953: Use of Hard-coded Credentials

The sample web application in web2py before 2.14.2 might allow remote attackers to execute arbitrary code via vectors involving use of a hardcoded encryption key when calling the session.connect function...

CVE-2016-3684

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338...

CVE-2016-3684

SAP Download Manager (versions up to 2.1.142) stores sensitive values in a configuration file encrypted with a hard-coded key. On Windows/Mac, the key combines the BIOS serial with a fixed key; on Linux/other platforms, the key is a fixed hard-coded value. This enables context-dependent attackers...

PT-2016-5656

Name of the Vulnerable Software and Affected Versions SAP Download Manager versions 2.1.142 and earlier Description The issue allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of a hardcoded encryption key used to protect stored data...

CVE-2016-3684: Undefined Security Weakness

SAP Download Manager 2.1.142 and earlier uses a hardcoded encryption key to protect stored data, which allows context-dependent attackers to obtain sensitive configuration information by leveraging knowledge of this key, aka SAP Security Note 2282338...

PT-2016-4766

Name of the Vulnerable Software and Affected Versions Cisco UCS Invicta versions 4.3, 4.5, and 5.0.1 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by sniffing network traffic to an Autosupport server and leveraging knowledge of a hardcoded GnuPG...

PT-2016-5118

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware prior to 01A.8 Description The issue concerns the use of a hardcoded encryption key across different installations of the device, allowing attackers to bypass...