EUVD-2016-7325

Malware in sbrugna...

CVE-2025-48413 Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

The /etc/passwd and /etc/shadow files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device...

CVE-2025-48413

The eCharge Hardy Barth cPH2 and cPP2 electric vehicle charging stations, specifically version 2.2.0 , are affected by hard-coded credentials. The /etc/passwd and /etc/shadow files contain hard-coded password hashes for the root user which are shipped with the update files. Because there is no op...

CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

Design/Logic Flaw

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

CVE-2016-6402

UCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System UCS through 3.02d allow local users to obtain OS root access via crafted CLI input, aka Bug ID CSCuz91263...

PT-2016-6877

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions through 3.02d Description The issue allows local users to obtain OS root access via crafted CLI input. Recommendations For versions through 3.02d, update to a version later than 3.02d to resolve the...

SA500 vulnerabilities - details

Hi Advisory by Cisco was published a few days ago Bugtraq ID: 48810. Now more details: 1. Unathenticated access to web management any user - including admin. Due to blind SQLi in the login form of web management port 443, https, login field, embedded sqlite DB, there is possible to obtain: a all...