CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-42639

H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...

PT-2024-30088 · H3C · H3C Magic B1St

Name of the Vulnerable Software and Affected Versions: H3C Magic B1ST version v100R012 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue affects the H3C Magic B1ST device, potentially allowing unauthorized access...

H3C GR1100-P 安全漏洞

The H3C GR1100-P is a high-performance enterprise router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR1100-P v100R009 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

CVE-2024-42639

The CVE-2024-42639 issue affects H3C GR1100-P v100R009. A hardcoded password in /etc/shadow allows an unauthenticated attacker to log in as root, yielding total compromise of the device. The vulnerability is classified with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8 (CRITICAL)...

H3C R3010 安全漏洞

The H3C R3010 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C R3010 v100R002L02 version, which stems from a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

PT-2024-13011 · Kiloview · P1/P2 +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows attackers to access the root account without authentication. This occurs when the device is configured with the IP address of 10.10.10.10, resulting in the automati...

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2024-38902

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

H3C Magic R230 安全漏洞

Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...

CVE-2024-38902

CVE-2024-38902 affects H3C Magic R230, specifically version V100R002. The description across sources confirms a hardcoded password in /etc/shadow that can allow an attacker to log in as root. Public records from NVD/Red Hat/CNVD/CVE entries corroborate the vulnerability details (no exploit specif...

CVE-2024-37644

TRENDnet TEW-814DAP v1FW1.01B01 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-37644

CVE-2024-37644 affects TRENDnet TEW-814DAP v1 (FW1.01B01). A hardcoded password in /etc/shadow.sample enables root login. CVSS v3.1: 8.8 (Network, HIGH impact across Confidentiality, Integrity, Availability). No remediation details are provided in the connected documents; exploitation status is n...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A hard-coded password vulnerability exists in D-Link DIR-605L v2.13B01, which can be exploited by an attacker to log in as root and gain administrator privileges...

TOTOLINK CP300 Hardcoded Password Vulnerability

TOTOLINK is a mid-to-high-end wireless routing brand in the Asia Pacific region. A hard-coded password vulnerability exists in the TOTOLINK CP300, which can be exploited by an attacker to log in as root...

CVE-2024-36782

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

CVE-2024-36782

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root...

PT-2024-27160 · Totolink · Totolink Cp300+

Name of the Vulnerable Software and Affected Versions: TOTOLINK CP300 version 2.0.4-B20201102 Description: A hardcoded password vulnerability was discovered in /etc/shadow.sample, allowing attackers to log in as root. This issue enables unauthorized access to the system. Recommendations: For...

TOTOLINK CP900L /etc/shadow.sample hardcoded password vulnerability

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900L suffers from a hard-coded password vulnerability that originates from the inclusion of a hard-coded password in /etc/shadow.sample, which can be exploited by an attacker to log in as root...

CVE-2024-35396

TOTOLINK CP900L v4.1.5cu.798B20221228 was discovered to contain a hardcoded password for telnet in /webcste/cgi-bin/product.ini, which allows attackers to log in as root...