1457 matches found
Synology DiskStation Manager Exposure of Sensitive Information to an Unauthorized Actor (CVE-2014-2264)
The OpenVPN module in Synology DiskStation Manager DSM 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2023-41610
The Victure PC420 smart camera, specifically version 1.1.39 , contains a security vulnerability where a root password is hardcoded and stored in plaintext . This flaw allows unauthorized access to the device with high impact on confidentiality, integrity, and availability. No official patch is cu...
CVE-2023-41610
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
PT-2024-12944 · Victure · Victure Pc420
Name of the Vulnerable Software and Affected Versions: Victure PC420 version 1.1.39 Description: The issue concerns a hardcoded root password stored in plaintext. Recommendations: For Victure PC420 version 1.1.39, consider changing the hardcoded root password to a unique and secure password as a...
CVE-2023-41610: Plaintext Storage of a Password
Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext...
CVE-2021-26138
The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with knowledge of the hardcoded password could exploit...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42637
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
CVE-2024-42638 affects H3C Magic B1ST v100R012. The vulnerability is a hardcoded password in the system file /etc/shadow that permits authentication as root, enabling full administrative access. Public metric data from NVD indicates a CRITICAL (9.8) base score with NETWORK attack vector, no privi...
CVE-2024-42637
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
The H3C GR1100-P high-performance enterprise router, specifically version v100R009 , contains a security vulnerability due to a hardcoded password in the /etc/shadow file. This flaw allows an attacker to gain unauthorized access by logging in as the root user. To mitigate this risk, it is recomme...
CVE-2024-42637
The H3C R3010 wireless router, specifically version v100R002L02 , is susceptible to a hardcoded password vulnerability located in the /etc/shadow file. This flaw allows an unauthenticated attacker to gain root access to the device. To mitigate this risk, it is recommended to change the hardcoded ...