Weak Password Vulnerability in Ruijie Networks EasyGate Easy Gateway

EasyGate hereinafter referred to as RG-EG is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress problems. A weak password vulnerability exists in Ruijie Networks EasyGate, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in secnet Security Network Intelligent AC Management System

Guangzhou AnNet Communication Technology Co., Ltd "AnNet Communication" is a service provider specializing in the research and development, production, sales and service of network communication equipment, and providing users with network security, routers, switches, firewalls, wireless AP covera...

Weak Password Vulnerability in Asus Computer Incorporated RT-N10E B1

Offering easy CD-ROM-free installation and stable data transfer rates, the RT-N10E B1 is a basic solution for wireless network setup. A weak password vulnerability exists in the Asus Computer Incorporated RT-N10E B1. The vulnerability can be exploited by an attacker to log into the router's backe...

MOXA NPort IAW5000A-I/O Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MOXA Equipment: NPort IAW5000A-I/O Series Vulnerabilities: Session Fixation, Improper Privilege Management, Weak Password Requirements, Cleartext Transmission of Sensitive Information, Improper...

Scanners-Box

This is a collection of open-source scanning tools, referred to as "Scanners Box" or "scanbox," maintained by the user "We5ter" on GitHub. The repository contains various tools for scanning and testing different aspects of a system or network, including subdomain enumeration, database vulnerabili...

Information Disclosure

cloud-init is vulnerable to information disclosure. The vulnerability exists as ccsetpassword in config/ccsetpasswords.py accepts a password with weak length...

Default credentials

In GLPI before version 9.5.0, the encryption algorithm used is insecure. The security of the data encrypted relies on the password used, if a user sets a weak/predictable password, an attacker could decrypt data. This is fixed in version 9.5.0 by using a more secure encryption library. The librar...

Weak Password Vulnerability in V2.3 Copy Management Server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd Hikvision Hikvision is a video-centered intelligent IoT solution and big data service provider. A weak password vulnerability exists in the Hikvision Digital Technology Co., Ltd. share management server V2.3, which can be exploited by an attacker to...

Stripo Inc: weak password poilicy in signup password leak to account takeover

Summary: add summary of the vulnerability i create account with weak password Steps To Reproduce: add details for how we can reproduce the issue 1.i create account with weak password qwerty123 2- account create done without validation 3- it should have protected users from attack and have policy...

U.S. Dept Of Defense: Password Cracking - Weak Password Used to Secure ████ Containing a Plaintext Password

Summary: I was able to crack the password to the ████████ located at ██████, as the pdf was protected with a weak password contained in a common word list. This guide contains steps to set-up the ███████ secure communication application with the unprotected configuration file located at██████████...

CVE-2020-25105

eramba c2.8.1 and Enterprise before e2.19.3 has a weak password recovery token createHash has only a million possibilities...

CVE-2020-25105

eramba c2.8.1 and Enterprise before e2.19.3 expose a weak password recovery token: createHash has only ~1,000,000 possibilities, enabling guessable token recovery. CVSS vectors show MEDIUM (2.0) and CRITICAL (3.1) with HIGH impact to confidentiality, integrity, and availability; no remediation de...

IBM Security Guardium Data Encryption (GDE) Password Strength Requirement Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. A password strength requirement vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2, which...

CVE-2019-4698

IBM Security Guardium Data Encryption GDE 3.0.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 171929...

CVE-2019-4698

IBM Guardium Data Encryption (GDE) 3.0.0.2 is affected by a password-strength requirement weakness: by default, it does not require strong passwords, which could allow an attacker to compromise user accounts. The issue is documented in CVE-2019-4698 and reflected in IBM/third-party sources in the...

Weak password vulnerability in the wireless smartweb management system of Ruijie Networks Co.

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A weak password vulnerability exists in the wireless smartweb management system of...

Weak password vulnerability in P-660HW-T1 of Zongqin Communication Equipment Trading (Shanghai) Co.

P-660HW-T1 is a wireless router product of Zongqin Communication Equipment Trading Shanghai Co. The P-660HW-T1 has a weak password vulnerability that can be exploited by an attacker to gain access to the P-660HW-T1 v3 via a An attacker can use this vulnerability to gain access to sensitive...

CVE-2020-15115

A flaw was found in etcd, where it does not perform any password length validation, which allows for very short passwords, such as those with a length of one. This flaw allows an attacker to guess or brute-force users' passwords with little computational effort. The highest threat from this...

Weak password vulnerability in AM600-PS2 of Suzhou Huichuan Technology Co.

The AM600-PS2 is a medium-sized programmable logic controller PLC designed with a modular structure. A weak password vulnerability exists in the AM600-PS2 of Suzhou Huichuan Technology Company Limited, which can be exploited by an attacker to log into the PLC's operating system...

Weak Password Vulnerability in Jiangsu LUCHI Cleaning Equipment IOT Management Platform

Weak passphrases refer to passphrases that contain only simple numbers and letters, such as "123", "abc", etc. Because such passphrases can be easily cracked by other people, which will make the user's Internet account under the control of other people, and therefore are not recommended to be use...