Schneider-electric Modicom Weak Password Recovery Mechanism for Forgotten Password

An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote user to access the password delete function of the web server. File data ot500170.nasl...

Weak password vulnerability in H3C ACG1000-M switches

Xinhua San Technologies Co., Ltd. has a full range of overall digital infrastructure capabilities in computing, storage, networking and security, and provides one-stop digital solutions, including cloud computing, big data, intelligent connectivity, information security, new security, Internet of...

Weak Password Vulnerability in Huasan ER5100 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER5100 router, which can be exploited by an attacker to log into the router's backend...

Weak Password Vulnerability in Huasan ER3260 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER3260 router, which can be exploited by an attacker to log into the router's backend...

Weak Password Vulnerability in Huasan ER6300G2 Router

Ltd. Huasan, mainly provides research, development, production, sales and services of IT infrastructure products and solutions. A weak password vulnerability exists in the Huasan ER6300G2 router, which can be exploited by an attacker to log into the router's backend...

Weak Password Vulnerability in NetGuard Firewall of Beijing NetGuard Cloud Information Technology Co.

Netnifty Firewall System V3.0PowerV6000 is a firewall product independently developed by Netnifty Nebula. It adopts the innovative VSP Versatile Security Platform universal security platform, which perfectly combines real-time operating system, network processing, security applications and other...

Weak Password Vulnerability in Xinhua San Technologies ER8300 Router

ER8300 is a full gigabit router for Internet cafes from H3C, featuring a professional 64-bit dual-core network processor. A weak password vulnerability exists in the ER8300 router of Xinhua San Technologies Co. An attacker can exploit this vulnerability to log into the system to obtain sensitive...

Weak Password Vulnerability in Huasan ER5200 Router

ER5200 is a high-performance Gigabit downstream router from H3C, which is targeted at the SMB market for Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A weak password vulnerability exists in the H3C ER5200 router, which can b...

CVE-2019-17216

An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authentication uses MD5 to hash passwords. Cracking is possible with minimal effort...

Weak Password Vulnerability in Streaming Media Management Server

Streaming media server is the core system of streaming media application, and it is the key platform for operators to provide video services to users. The main function of streaming media server is to collect, cache, schedule and transmit and play streaming media content. A weak password...

Weak Password Vulnerability in Mingguo Database Audit and Risk Control System of Hangzhou ACE Information Technology Co.

The Meiji Database Audit and Risk Control System is a database protocol parsing device, capable of parsing the access traffic to and from the core database at the datagram field level. There is a weak password vulnerability in the database audit and risk control system of Hangzhou ACE Information...

Weak Password Vulnerability in Mingguo Comprehensive Log Audit Platform of Hangzhou Anheng Information Technology Co.

MingGuard Integrated Log Audit Platform is a comprehensive management platform as an information system. There is a weak password vulnerability in Mingguo Comprehensive Log Audit Platform of Hangzhou ACE Information Technology Co., Ltd, which can be exploited by an attacker to log in to the syste...

Weak Password Vulnerability in NetGuard Network Audit System V3.0 of Beijing NetGuard Nebula Information Technology Co.

Netnifty Network Audit System Operation and Maintenance Security Control Type is one of Netnifty's comprehensive internal control series products. It is a compliance control system that controls and audits user operation and maintenance operations in the business environment. Netnifty Network Aud...

IBM Security Key Lifecycle Manager Weak Password Policy Vulnerability

IBM Security Key Lifecycle Manager Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A weak password policy vulnerability exists in IBM...

Security Bulletin: IBM Security Key Lifecycle Manager uses Weak password policy (CVE-2019-4565)

Summary IBM Security Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. Vulnerability Details CVEID: CVE-2019-4565 DESCRIPTION: IBM Tivoli Key Lifecycle Manager does not require that users...

Weak password vulnerability in NetGuard Operations and Maintenance Security Gateway V3.0 at Beijing NetGuard Cloud Information Technology Co.

Netnifty O&M Security Gateway is a compliance management system for controlling and auditing user O&M operations in business environments. A weak password vulnerability exists in the Netnifty Operations and Maintenance Security Gateway of Beijing Netnifty Nebula Information Technology Company...

eWON Flexy - Authentication Bypass Exploit

Exploit for hardware platform in category web applications ! /usr/bin/env python ''' Exploit Title: eWON v13.0 Authentication Bypass Date: 2018-10-12 Exploit Author: Photubias – tijldotDeneutatHowestdotbe for www.ic4.be Vendor Advisory: 1...

Weak Password Vulnerability in Tianqing Intrusion Prevention System NGIPS of Beijing Qixingchen Information Security Technology Co.

SkyQuest Intrusion Prevention System is a network-based intrusion prevention product independently developed by Qixing, which is based on the core concept of deep defense and precise blocking. Through deep analysis of network traffic, it can accurately discover various types of intrusion attacks ...

eWON Flexy - Authentication Bypass

!/usr/bin/env python ''' Exploit Title: eWON v13.0 Authentication Bypass Date: 2018-10-12 Exploit Author: Photubias – tijldotDeneutatHowestdotbe for www.ic4.be Vendor Advisory: 1 https://websupport.ewon.biz/support/news/support/ewon-security-enhancement-131s0-0 2...

CVE-2019-4321

IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users should have strong passwords by default, which makes it easier for attackers to...