CVE-2024-54747

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-54745

The WAVLINK WN701AE router (specifically version M01AE_V240305 ) contains a hardcoded password vulnerability in the /etc/shadow file. This issue stems from the incorrect use of standard permissions in the router's microprogramming software. A malicious actor can exploit this flaw to bypass securi...

CVE-2024-54747

The WAVLINK WN531P3 router (version 202383 ) contains a hardcoded password vulnerability in the /etc/shadow file. This flaw stems from incorrect standard permissions, allowing a malicious actor to bypass security restrictions and gain root access to the system remotely. Exploitation can involve s...

CVE-2024-54750

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...

CVE-2024-54750

The Ubiquiti U6-LR wireless remote access point, specifically version 6.6.65 , contains a hardcoded password vulnerability in the /etc/shadow file. This flaw allows an attacker to gain root access, providing unauthorized superuser privileges to the system. While Ubiquiti maintains that this does ...

CVE-2024-54749

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...

CVE-2024-54749

The Ubiquiti U7-Pro wireless remote access point, specifically version 7.0.35 , is affected by a hardcoded password vulnerability located in /etc/shadow. This flaw could potentially allow an attacker to log in as root . The supplier disputes this finding, noting that the password was only identif...

CVE-2024-54750

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...

CVE-2024-54747

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-54745

WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-54749

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...

PT-2024-36412 · Ubiquiti · Ubiquiti U7-Pro

Name of the Vulnerable Software and Affected Versions: Ubiquiti U7-Pro version 7.0.35 Description: A hardcoded password vulnerability was discovered in /etc/shadow, which allows attackers to log in as root. However, the supplier disputes this claim, stating that the device cannot be deployed...

PT-2024-36411

Name of the Vulnerable Software and Affected Versions WAVLINK WN531P3 version 202383 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with elevated privileges. Recommendations F...

PT-2024-36414

Name of the Vulnerable Software and Affected Versions Ubiquiti U6-LR version 6.6.65 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with superuser privileges. Recommendations F...

PT-2024-36410

Name of the Vulnerable Software and Affected Versions WAVLINK WN701AE version M01AE V240305 Description A hardcoded password vulnerability was discovered in the /etc/shadow file, allowing attackers to log in as the root user. This issue enables unauthorized access to the system with superuser...

CVE-2024-54749: Use of Hard-coded Credentials

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...

CVE-2024-54750: Use of Hard-coded Credentials

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...

CVE-2024-54747: Incorrect Default Permissions

WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-54745: Incorrect Default Permissions

WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2023-51638

Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a...