110 matches found
CVE-2018-9083: Use of Hard-coded Credentials
In System Management Module SMM versions prior to 1.06, the SMM contains weak default root credentials which could be used to log in to the device OS -- if the attacker manages to enable SSH or Telnet connections via some other vulnerability...
openSUSE Security Update : systemd (openSUSE-2018-1382)
This update for systemd fixes the following issues : Security issues fixed : - CVE-2018-15688: A buffer overflow vulnerability in the dhcp6 client of systemd allowed a malicious dhcp6 server to overwrite heap memory in systemd-networkd. bsc1113632 - CVE-2018-15686: A vulnerability in...
CVE-2018-15427
A vulnerability in Cisco Video Surveillance Manager VSM Software running on certain Cisco Connected Safety and Security Unified Computing System UCS platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user...
Cisco Video Surveillance Manager Device Default Password Vulnerability
Cisco Video Surveillance Operations Manager is an enterprise-class video configuration and management solution. A device default password vulnerability exists in Cisco Video Surveillance Manager due to the presence of undocumented default static user credentials for the root account of the affect...
Cisco Policy Suite Cluster Manager Default Password Vulnerability
Cisco Policy Suite is a carrier-grade policy, charging, and subscriber data management solution. A default password vulnerability exists in Cisco Policy Suite Cluster Manager, which allows an unauthenticated, remote attacker to log in to a system with default static user credentials using a root...
CVE-2018-0375
A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an affected system using the root account, which has default, static user credentials. The vulnerability is due to the presence of undocumented, static user...
Moxa AWK-3131A Wireless Access Point Hardcoded Administrator Certificate Vulnerability
The Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa. A security vulnerability exists in the Moxa AWK-3131A Wireless Access Point using firmware version 1.1, which originates from the use of hard-coded credentials by a root account. An attacker could use the vulnerability to ta...
TRENDnet TEW-823DRU Router Use Pre-installed Configuration Data Access
The vulnerability of TRENDnet TEW-823DRU router microprogramming software is related to the use of pre-installed account data for the root account. Exploiting this vulnerability allows a malicious actor to gain access to the device via an FTP session...
Google Golang Go Certificate Validation Vulnerability
Google Golang Go is a programming language optimized for programming applications on multiprocessor systems by Google. A security vulnerability exists in Google Golang Go versions 1.7.3 and 1.6.3. A remote attacker can exploit this vulnerability to authenticate a connection with the help of...
PT-2017-18517
Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0 Description The issue allows an attacker to log into the device using default credentials as root, with the username: root and password: root, via telnet, which is open by default. The attacker can then trick a...
CVE-2017-7317
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
CVE-2017-7317
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
Design/Logic Flaw
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
CVE-2017-7317
Summary: CVE-2017-7317 affects Humax Digital HG100 router devices (HG100, firmware 2.0.6). The vulnerability arises because the root credentials can be found in the backup file GatewaySettings.bin, enabling an attacker to obtain credentials stored in plaintext. This impacts confidentiality, integ...
CVE-2017-7317
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
PT-2017-17661
Name of the Vulnerable Software and Affected Versions Humax Digital HG100 version 2.0.6 Description An issue was discovered where an attacker can obtain the root credentials from the backup file, specifically GatewaySettings.bin. Recommendations For Humax Digital HG100 version 2.0.6, consider...
CVE-2017-7317: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin...
SICUNET Access Controller 0.32-05z Code Execution / File Disclosure Vulnerabilities
Exploit for php platform in category web applications SICUNET Physical Access Controller - Multiple Vulnerabilities ------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in the SICUNET Access Controller Products. The...
SICUNET Access Controller 0.32-05z Code Execution / File Disclosure
SICUNET Physical Access Controller - Multiple Vulnerabilities ------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in the SICUNET Access Controller Products. The vulnerabilities were discovered during a black box security...