552 matches found
Default credentials
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
CVE-2019-10661
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
CVE-2019-10661
On Grandstream GXV3611IRHD before 1.0.3.23 devices, the root account lacks a password...
Default Password ('!2345Asdfg') for 'root' Account
The account 'root' on the remote host has the password '!2345Asdfg'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "!2345Asdfg";...
The vulnerability of the embedded software in the CNC11 TITANIUM mini system allows a hacker to gain full access to the system.
The vulnerability of the embedded software of the CNC11 TITANIUM mini system is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ful...
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 allows a hacker to gain full access to the system.
The vulnerability of the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker,...
CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting
CentOS Web Panel 0.9.8.740 - Cross-Site Request Forgery Cross-Site Scripting Title: CentOS Web Panel Root Account Takeover + Remote Command Execution var url = "http://targetserver:2030/admin/index.php?module=rootpwd"; var params = "ifpost=yes&password1=newpassword&password2=newpassword"; var vul...
CVE-2018-18754
ZyXEL VMG3312-B10B 1.00AAPP.7 devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file...
CVE-2018-18754
ZyXEL VMG3312-B10B 1.00AAPP.7 devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file...
Design/Logic Flaw
ZyXEL VMG3312-B10B 1.00AAPP.7 devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file...
ZyXEL VMG3312-B10B Backdoor Root Account Vulnerability
The VMG3312-B10B is a Wireless N VDSL2 4-port gateway with USB from ZyXEL. A backdoor root account vulnerability exists in the ZyXEL VMG3312-B10B 1.00 AAPP.7. An attacker can exploit this vulnerability to access this backdoor root account via a tTn3+Z@!Sr0O+ password hash in the etc/default.cfg...
CVE-2018-18754
CVE-2018-18754 affects ZyXEL VMG3312-B10B gateways (1.00(AAPP.7)) with a backdoor root account whose password hash tTn3+Z@!Sr0O+ is stored in etc/default.cfg. Multiple connected sources corroborate a backdoor/root access issue, enabling potentially unauthorized full control. NVD metrics show a hi...
CVE-2018-18754
ZyXEL VMG3312-B10B 1.00AAPP.7 devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/default.cfg file...
Improper access control
An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account...
CVE-2018-17873
An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3 and earlier allows an attacker with adjacent network access to read the SSH Private Key and log in to the root account...
CVE-2017-18348
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
Design/Logic Flaw
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
CVE-2017-18348
Splunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain privileges by leveraging access to that non-root account to modify $SPLUNKHOME/etc/splunk-launch.conf and insert Trojan horse programs into $SPLUNKHOME/bin, becau...
CVE-2018-15427
A vulnerability in Cisco Video Surveillance Manager VSM Software running on certain Cisco Connected Safety and Security Unified Computing System UCS platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user...
Design/Logic Flaw
A vulnerability in Cisco Video Surveillance Manager VSM Software running on certain Cisco Connected Safety and Security Unified Computing System UCS platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user...