CVE-2016-10305

The CVE-2016-10305 entry affects Trango devices (Apex series, Giga/Strata lines) with a built-in hidden root account and a default password that was once stored in cleartext in a software update package on a Trango FTP server. This account can be accessed via SSH/TELNET and provides access to the...

CVE-2016-10306

The CVE-2016-10306 entry affects Trango Altum AC600 devices, where a built-in hidden root account uses the default password “abcd1234” and is accessible via SSH/TELNET, granting full control over the embedded UNIX OS. The root account and default credentials enable remote, privileged access witho...

CVE-2016-10308

CVE-2016-10308 affects Siklu EtherHaul radios running versions prior to 3.7.1 and 6.x prior to 6.9.0. The vulnerability stems from a built-in, hidden root account with an unchangeable password shared across all devices. This account allows access to the embedded Linux OS via both SSH and the devi...

CVE-2016-10307

Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public but the cleartext value is perhaps not yet public. This account is accessible via SSH and/or TELNET, and...

CVE-2016-10305

Trango Apex = 2.1.1, ApexLynx 2.0, ApexOrion 2.0, ApexPlus = 3.2.0, Giga = 2.6.1, GigaLynx 2.0, GigaOrion 2.0, GigaPlus = 3.2.3, GigaPro = 1.4.1, StrataLink 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software...

CVE-2016-10307

The CVE-2016-10307 entry concerns Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 embedded devices. A built-in hidden root account with a default password is present; the MD5 hash of that password is public, and the cleartext may not be publicly known. This acc...

CVE-2016-10308: Use of Hard-coded Credentials

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

PT-2017-3053

Name of the Vulnerable Software and Affected Versions WIFICAM devices affected versions not specified Description The issue concerns a backdoor root account in WIFICAM devices that can be accessed via TELNET, allowing a remote attacker to gain access to the root account. This is related to the us...

PT-2016-3209

Name of the Vulnerable Software and Affected Versions Trango Altum AC600 devices affected versions not specified Description The issue concerns a built-in, hidden root account with a default password of abcd1234. This account can be accessed via SSH and/or TELNET, granting full control over the...

Default Password '3!acK5tratu5' for 'root' Account (SSH)

The remote device is using known default credentials. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default Password 'anko' for 'root' Account

The account 'root' on the remote host has the default password 'anko'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "anko"; include'deprecatednasllevel.inc';...

Default Password 'xmhdipc' for 'root' Account

The account 'root' on the remote host has the default password 'xmhdipc'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "xmhdipc"; include'deprecatednasllevel.inc';...

Default Password '888888' for 'root' Account

The account 'root' on the remote host has the default password '888888'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "888888"; include'deprecatednasllevel.inc';...

Default Password 'realtek' for 'root' Account

The account 'root' on the remote host has the default password 'realtek'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "realtek"; include'deprecatednasllevel.inc';...

Default Password '54321' for 'root' Account

The account 'root' on the remote host has the default password '54321'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "54321"; include'deprecatednasllevel.inc';...

Default Password 'user' for 'root' Account

The account 'root' on the remote host has the default password 'user'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "user"; include'deprecatednasllevel.inc';...

Default Password 'system' for 'root' Account

The account 'root' on the remote host has the default password 'system'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "system"; include'deprecatednasllevel.inc';...

Default Password '00000000' for 'root' Account

The account 'root' on the remote host has the default password '00000000'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "00000000"; include'deprecatednasllevel.inc';...

Default Password '1234' for 'root' Account

The account 'root' on the remote host has the default password '1234'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "1234"; include'deprecatednasllevel.inc';...

Default Password 'pass' for 'root' Account

The account 'root' on the remote host has the default password 'pass'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "pass"; include'deprecatednasllevel.inc';...