Master IP CAM 01 - Multiple Vulnerabilities

Master IP CAM 01 - Multiple Vulnerabilities Exploit Title: Master IP CAM 01 Multiple Vulnerabilities Date: 17-01-2018 Remote: Yes Exploit Authors: Daniele Linguaglossa, Raffaele Sabato Contact: https://twitter.com/dzonerzy, https://twitter.com/syrion89 Vendor: Master IP CAM Version: 3.3.4.2103 CV...

Hardcoded credentials

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

CVE-2018-5723

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

CVE-2018-5723

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

CVE-2018-5723

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

CVE-2018-5723: Use of Hard-coded Credentials

MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account...

PT-2018-1034

Name of the Vulnerable Software and Affected Versions MASTER IPCAMERA01 version 3.3.4.2103 Description The issue is related to the use of hardcoded credentials in the device's software. Specifically, the root account has a hardcoded password of cat1029. This could allow a remote attacker to gain...

Hardcoded credentials

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session...

CVE-2014-8579

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session...

CVE-2014-8579: Use of Hard-coded Credentials

TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account, which makes it easier for remote attackers to obtain access via an FTP session...

macOS 10.13 Authentication Bypass Remote Check (CVE-2017-13872)

The remote host is affected by an authentication bypass vulnerability. A local attacker or a remote attacker with credentials for a standard user account has the ability to blank out the root account password. This can allow an authenticated attacker to escalate privileges to root and execute...

Apple MacOS High Sierra disabled account authentication bypass

Overview Apple MacOS High Sierra fails to properly require authentication for disabled accounts, such as root account, which can allow an authenticated user to obtain root privileges. Description Apple MacOS High Sierra 10.13 contains a flaw in how it authenticates disabled accounts. When a...

MacOS 10.13 root Authentication Bypass (Security Update 2017-001)

The remote host is running a version of MacOS 10.13 or 10.13.1 that is missing a security update. It is, therefore, affected by a root authentication bypass vulnerability. A local attacker or a remote attacker with credentials for a standard user account has the ability to blank out the root...

Altum Router Privilege Escalation

The vulnerability of the Altum router microprogramming system is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker, operating remotely, to gain access to the embedded operating system with administrator privileges using SSH or Telnet connections...

CVE-2017-12172

PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system account, and database superusers have effective ability to run arbitrary code under that system account. PostgreSQL provid...

Design/Logic Flaw

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account and similarly can have etc/icinga.cfg owned by a non-root account, which allows local users to gain privileges by leveraging access to this non-roo...

CVE-2017-16882

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account and similarly can have etc/icinga.cfg owned by a non-root account, which allows local users to gain privileges by leveraging access to this non-roo...

CVE-2017-16882

Technical specifics for CVE-2017-16882 are not provided in the connected documents. The initial entry notes a local privilege escalation in Icinga Core up to v1.14.0 via non-root-owned bin/icinga and icinga.cfg, with related components mentioned. Monitor for updates.

CVE-2017-16882

Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account and similarly can have etc/icinga.cfg owned by a non-root account, which allows local users to gain privileges by leveraging access to this non-roo...

D-Link Corp. DVG-N5402SP Router Privilege Escalation

The vulnerability of D-Link Corp.’s DVG-N5402SP router software is related to the use of pre-set user accounts. The “root” and “tw” passwords have been set for the “root” and “tw” user accounts, respectively. Exploiting this vulnerability could allow a remote attacker to gain administrator...