336 matches found
The vulnerability of Wago industrial-controlled switches is related to the presence of pre-installed authentication data, which allows a intruder to gain access to the device.
The vulnerability of Wago industrial-controlled switches lies in the presence of pre-installed authentication data root account credentials. Exploiting this vulnerability allows a malicious actor to gain access to the device via SSH and TELNET protocols from a remote location...
Information leakage vulnerability in Kunlun Tongstate MCGS touch panel TPC1062Ti system
MCGS is a set of Windows-based configuration software system developed by Beijing Kunlun Automation Software Technology Co., Ltd. which is used to quickly construct and generate the upper computer monitoring system, and it mainly accomplishes on-site data acquisition and monitoring, front-end dat...
CVE-2017-14202
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the shell component of Zephyr allows a serial or telnet connected user to cause a crash, possibly with arbitrary code execution. This issue affects: Zephyr shell versions prior to 1.14.0 on all...
CVE-2019-12327
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed...
CVE-2019-12327
Hardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to the device via telnet. The telnet service is running on port 2323; it cannot be turned off and the credentials cannot be changed...
D-Link DCS-1100 and D-Link DCS-1130 Trust Management Vulnerability
The D-Link DCS-1100 and the D-Link DCS-1130 are both network cameras from Taiwan, China-based AUO D-Link. A trust management vulnerability exists in the D-Link DCS-1100 and DCS-1130 that stems from the program using a default password for the Telnet daemon. An attacker could exploit the...
CVE-2018-14528
Invoxia NVX220 devices allow TELNET access as admin with a default password...
Default credentials
Invoxia NVX220 devices allow TELNET access as admin with a default password...
CVE-2018-14528
Invoxia NVX220 devices allow TELNET access as admin with a default password...
UBUNTU-CVE-2018-4059
An exploitable unsafe default configuration vulnerability exists in the TURN server function of coTURN prior to version 4.5.0.9. By default, the TURN server runs an unauthenticated telnet admin portal on the loopback interface. This can provide administrator access to the TURN server configuratio...
PT-2019-19276 · Dasan · Dasan H665
Name of the Vulnerable Software and Affected Versions: DASAN H665 version 1.46p1-0028 Description: A backdoor account exists in the /bin/login of DASAN H665 devices, allowing an attacker to login to the admin account via TELNET using the account dnsekakf2$$. This issue has seen increased interest...
CVE-2018-19069
An issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application Firmware 2.72.1.32, and Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The CGIProxy.fcgi?cmd=setTelnetSwitch feature is authorized for the root user with a password of...
CVE-2018-19069
The CVE-2018-19069 entry affects Foscam C2 devices (System Firmware 1.11.1.8 and App Firmware 2.72.1.32) and Opticam i5 devices (System Firmware 1.5.2.11 and App Firmware 2.21.1.128). The issue involves CGIProxy.fcgi?cmd=setTelnetSwitch being authorized for the root user with the password “toor,”...
CVE-2016-9497
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many...
CVE-2016-9495
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port 23 can be obtained through using one of a few default credentials shared among all devices...
Baseon Lantronix MSS Device Information Disclosure Vulnerability
Baseon Lantronix MSS devices is a serial communication server device from Lantronix USA. A security vulnerability exists in Baseon Lantronix MSS devices that originates from access to TELNET, programmed to require a password for difficulty. An attacker could exploit the vulnerability to log into...
CVE-2018-12925
Baseon Lantronix MSS devices do not require a password for TELNET access...
Default credentials
Baseon Lantronix MSS devices do not require a password for TELNET access...