Lucene search
+L

202 matches found

Cvelist
Cvelist
•added 2024/10/29 12:37 a.m.•36 views

CVE-2024-45656 IBM Flexible Service Processor hard coded credentials

IBM Flexible Service Processor FSP FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP...

9.8CVSS0.00446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/29 12:37 a.m.•24 views

CVE-2024-45656 IBM Flexible Service Processor hard coded credentials

IBM Flexible Service Processor FSP FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP...

9.8CVSS7.2AI score0.00446EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•19 views

IBM Flexible Service Processor 信任管理问题漏洞

The IBM Flexible Service Processor IBM FSP is a series of flexible service processors from International Business Machines IBM. IBM Flexible Service Processor is vulnerable to a trust management issue vulnerability that stems from having static credentials that could allow a network user to gain...

9.8CVSS6.8AI score0.00446EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•25 views

PT-2024-7403 · Ibm · Ibm Flexible Service Processor

Name of the Vulnerable Software and Affected Versions: IBM Flexible Service Processor FSP versions FW860.00 through FW860.B3 IBM Flexible Service Processor FSP versions FW950.00 through FW950.C0 IBM Flexible Service Processor FSP versions FW1030.00 through FW1030.61 IBM Flexible Service Processor...

9.8CVSS7.3AI score0.00446EPSS
SaveExploits0References11
NVD
NVD
•added 2024/10/23 6:15 p.m.•40 views

CVE-2024-20412

A vulnerability in Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded...

9.3CVSS0.00214EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/23 5:39 p.m.•54 views

CVE-2024-20412

A vulnerability in Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded...

9.3CVSS0.00214EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/23 5:39 p.m.•124 views

CVE-2024-20412

Cisco Firepower Threat Defense (FTD) Software on Firepower 1000, 2100, 3100, and 4200 Series contains static accounts with hard-coded passwords, enabling an unauthenticated, local attacker to access the CLI with those credentials. A successful exploit could allow data access, limited troubleshoot...

9.3CVSS9AI score0.00214EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2024/10/23 4:00 p.m.•56 views

Cisco Firepower Threat Defense Software for Firepower 1000, 2100, 3100, and 4200 Series Static Credential Vulnerability

A vulnerability in Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded...

9.3CVSS8.9AI score0.00214EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/09/06 12:00 a.m.•21 views

The vulnerability of the Cisco Smart License Utility software management software lies in undocumented static user credentials. This allows a malicious individual to gain unauthorized access to confidential information and to access the API without proper authorization.

The vulnerability of the Cisco Smart License Utility software management system is related to undocumented static account data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information and unauthorized access to the API...

10CVSS8.1AI score0.9709EPSS
SaveExploits0References7Affected Software1
attackerkb
attackerkb
•added 2024/09/04 12:00 a.m.•21 views

CVE-2024-20439

A vulnerability in Cisco Smart Licensing Utility CSLU could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could...

9.8CVSS7.3AI score0.9709EPSS
SaveIn wildExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/04 12:00 a.m.•3 views

CVE-2024-20439: Hidden Functionality

A vulnerability in Cisco Smart Licensing Utility CSLU could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could...

9.8CVSS8.4AI score0.9709EPSS
SaveExploits0References2
CNVD
CNVD
•added 2023/11/17 12:00 a.m.•86 views

Fortinet FortiClient Hardcoding Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

5.5CVSS7AI score0.00205EPSS
SaveExploits0References1
NVD
NVD
•added 2023/11/14 7:15 p.m.•30 views

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

5.5CVSS0.00195EPSS
SaveExploits0References1
Prion
Prion
•added 2023/11/14 7:15 p.m.•26 views

Hardcoded credentials

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

1.7CVSS7.1AI score0.00195EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/11/14 6:15 p.m.•53 views

Hardcoded credentials

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

1.7CVSS7.1AI score0.00205EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/11/14 6:08 p.m.•43 views

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

4.1CVSS5.7AI score0.00195EPSS
SaveExploits0References1
CVE
CVE
•added 2023/11/14 6:07 p.m.•119 views

CVE-2023-33304

CVE-2023-33304 affects Fortinet FortiClient for Windows (versions 7.0.0–7.0.9 and 7.2.0–7.2.1). The issue is hard-coded credentials that allow bypassing protections via static credentials. According to the sources, exploitation status is not detailed in these documents. Remediation is available: ...

5.5CVSS5.4AI score0.00205EPSS
SaveExploits0References1Affected Software1
Fortinet
Fortinet
•added 2023/11/14 12:00 a.m.•12 views

Use of hardcoded credentials in fmgsvrd

...

5.5CVSS6AI score0.00195EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/11/08 12:00 a.m.•18 views

PT-2023-9589 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series affected versions not specified Description: A vulnerability in the software could allow an unauthenticated, local attacker to access an affecte...

9.3CVSS6.6AI score0.15874EPSS
SaveExploits0References12
Prion
Prion
•added 2023/10/04 5:15 p.m.•26 views

Design/Logic Flaw

A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted. This vulnerability is due to the presence of static user credentials for th...

7.5CVSS9.7AI score0.02638EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder