CVE-2013-4876: Undefined Security Weakness

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

Aastra IP Telephone hardcoded telnet admin password

Aastra IP Telephone hardcoded telnet admin password --------------------------------------------------- Affected products ================= Aastra 6753i IP Telephone Firmware Version 3.2.2.56 Firmware Release Code SIP Boot Version 2.5.2.1010 Background ========== "The 6753i from Aastra offers...

Aastra IP Telephone Hardcoded Password

Aastra IP Telephone hardcoded telnet admin password --------------------------------------------------- Affected products ================= Aastra 6753i IP Telephone Firmware Version 3.2.2.56 Firmware Release Code SIP Boot Version 2.5.2.1010 Background ========== "The 6753i from Aastra offers...

CVE-2012-4702

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

CVE-2012-4702

CVE-2012-4702 affects 360 Systems image servers: Maxx, Image Server Maxx, and Image Server 2000. The root cause is a hardcoded password for the root account, enabling an attacker to log in via SSH and potentially execute arbitrary code or modify video content/scheduling. Affected devices include ...

PT-2013-1701

Name of the Vulnerable Software and Affected Versions 360 Systems Maxx, Image Server Maxx, and Image Server 2000 affected versions not specified Description The issue allows remote attackers to execute arbitrary code or modify video content and scheduling via an SSH session, due to a hardcoded...

CVE-2012-4702: Undefined Security Weakness

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session...

Hardcoded Password Enables Remote Attacks on Samsung Printers

Password woes apparently aren’t limited to endpoints. US-CERT issued an advisory Tuesday warning users of Samsung printers, including some Dell printers manufactured by Samsung, that a hardcoded password could enable remote code execution. “Samsung printers contain a hardcoded SNMP full read-writ...

Hard-Coded Password Leaves GarrettCom Switches Open to Attack, ICS-CERT Warns

The Department of Homeland Security is warning users of some of GarrettCom’s switches that there is a hard-coded password in a default account on the devices, which are deployed in a number of critical infrastructure industries, that could allow an attacker to take control of them. A researcher a...

CVE-2012-3014

The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors...

Hardcoded credentials

The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors...

CVE-2012-3014

The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors...

CVE-2012-3014

The CVE-2012-3014 entry concerns GarrettCom Magnum MNS-6K Management Software that uses a hardcoded administrative password. Affected versions are MNS-6K prior to 4.4.0 and 14.x prior to 14.4.0. Root cause: undocumented hardcoded credential enabling privilege escalation to administrative level fo...

PT-2012-4438

Name of the Vulnerable Software and Affected Versions GarrettCom Magnum MNS-6K versions prior to 4.4.0 GarrettCom Magnum MNS-6K versions 14.x prior to 14.4.0 Description The issue concerns a hardcoded password for an administrative account in the Management Software application. This hardcoded...

CVE-2012-3014: Undefined Security Weakness

The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors...

CVE-2012-4577

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

CVE-2012-4577

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...

CVE-2012-4577

CVE-2012-4577 involves hard-coded root credentials (password) on the Linux firmware images of Korenix JetPort 5600 series and ORing Industrial DIN-Rail serial-device servers. The vulnerability enables remote administrative access via SSH, with CVSS v2 base score 10.0 (AV:N/AC:L/Au:N/C:C/I:C/A:C)....

PT-2012-5485

Name of the Vulnerable Software and Affected Versions Korenix Jetport 5600 series affected versions not specified ORing Industrial DIN-Rail serial-device servers affected versions not specified Description The issue concerns a hardcoded password in the Linux firmware image. Specifically, the root...

CVE-2012-4577: Undefined Security Weakness

The Linux firmware image on 1 Korenix Jetport 5600 series serial-device servers and 2 ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session...