CVE-2017-9853

SMA Solar Technology inverters (Sunny Boy TLST-21/TL-21 and Sunny Tripower TL-10/TL-30) are affected by a weak password policy: no complexity or length requirements and a maximum 12-character limit, making strong passwords impossible. The CVE details state that this could allow password-related a...

CVE-2017-9853

An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user and installer password. No complexity requirements or length requirements are set. Also, strong passwords are impossible due to a maximum of 12 characters and a limited set of...

PT-2017-19225 · Sma Solar Technology · Tl-30 +3

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products, specifically Sunny Boy TLST-21, TL-21, Sunny Tripower TL-10, and TL-30 affected versions not specified Description: An issue was discovered in SMA Solar Technology products where the inverters use a weak hashing...

PT-2017-19219 · Sma Solar Technology · Sunny Tripower +2

Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products affected versions not specified Sunny Boy versions TLST-21 and TL-21 Sunny Tripower versions TL-10 and TL-30 Description: An issue was discovered in SMA Solar Technology products, where all inverters have a weak...

Udemy: Weak Password

Reporter thinks that our password rules should be different...

Boozt Fashion AB: Weak Password

Vulnerability- Weak password can set such as ash12345. Link https://www.boozt.com/eu/en/customer/create Steps to reproduce: 1.Add name,email address etc. 2.Add password as ash12345 3.Reenter password as ash12345 4.Password set successfully. This password can easily be cracked using dictionary...

GNOME Web (Epiphany) Weak Password Vulnerability

GNOME Web Epiphany is a browser product for the GNOME desktop. The product provides paging, cookie management, pop-up ad control, and other features. A security vulnerability exists in GNOME Web Epiphany. A remote attacker can exploit this vulnerability to obtain stored passwords...

Weak password vulnerability in digital learning platforms for vocational institutions

The digital learning platform for vocational colleges and universities is an all-round and personalized informatization solution for school education and corporate learning provided by Beijing Huidong Times Technology Co. There is a weak password vulnerability in the Digital Learning Platform for...

Weak Password Vulnerability in DebugShell of Various ZTE OLT PON Devices

ZTE OLT C200, C220, C300, and C320 are key PON devices used in optical switching networks in the telecommunications industry. A weak password vulnerability exists in DebugShell of various ZTE OLT PON devices, which can be exploited by an attacker to add passwords for daily operation accounts,...

Schneider Electric Ampla MES Weak Password Vulnerability

Ampla Manufacturing Execution System MES is a manufacturing execution system from Schneider Electric, France, for on-site production management in production plants and factories. A weak password vulnerability exists in Schneider Electric Ampla MES, where Ampla MES provides the ability to configu...

Weak Password Vulnerability in Glodon Console at Quanta Software Co.

Quanta Technology Co., Ltd. is an information technology platform operator serving builders and operators of construction products, providing customers with information technology solutions for the whole life cycle of construction projects. A weak password vulnerability exists in the Glodon conso...

CVE-2017-7903

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...

Default credentials

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...

CVE-2017-7903

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...

CVE-2017-7903

CVE-2017-7903 refers to a vulnerability in Rockwell Automation Allen-Bradley MicroLogix 1100/1400 PLCs due to weak password requirements: numeric passwords with small maximum length used by models such as 1763-L16AWA/B, 1763-L16DWD and 1766-L32 variants (firmware 16.00 and prior). Root cause: wea...

CVE-2017-7903

A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and prior versions; 1763-L16BBB, Series A and B, Version 16.00 and prior versions; 1763-L16BWA, Series A and B, Version...

CVE-2016-9738

IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 119783...

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple loopholes

Shaanxi Weibin District Government Service Center Approval Electronic Monitoring System has multiple vulnerabilities Weak password in the background: also the initial password http://113.201.122.70:8080/Approval/System/Login.aspx...

Weak Password Vulnerability in GoodWe PV Plant Monitoring System Android APP

GoodWe PV Plant Monitoring System Android APP is a very global PV plant monitoring app. GoodWe photovoltaic power plant monitoring Android APP system has a weak password vulnerability, the attacker can use the vulnerability to directly enter the remote end of the cell phone monitoring system,...

Weak Password Vulnerability in AppEx CRE Smart Acceleration Gateway

AppEx is a full line of application delivery, WAN acceleration, and Internet acceleration hardware and software products. A weak password vulnerability exists in AppEx CRE Smart Acceleration Gateway. An attacker is allowed to log in to the system backend using the default weak password to gain...