Lucene search
+L

11591 matches found

OSV
OSV
added 2023/04/13 8:15 p.m.12 views

CVE-2023-27746

BlackVue DR750-2CH LTE v.1.0122022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted...

9.8CVSS5.7AI score0.01752EPSS
SaveExploits1References4
NVD
NVD
added 2023/04/13 8:15 p.m.30 views

CVE-2023-27746

BlackVue DR750-2CH LTE v.1.0122022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted...

9.8CVSS9.5AI score0.01752EPSS
SaveExploits1References4
Prion
Prion
added 2023/04/13 8:15 p.m.22 views

Default credentials

BlackVue DR750-2CH LTE v.1.0122022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted...

7.5CVSS9.4AI score0.01752EPSS
SaveExploits1References4Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/04/13 12:00 a.m.32 views

Fortinet Fortigate (FG-IR-22-444)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-444 advisory. - An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 throug...

8.8CVSS8AI score0.00405EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/13 12:00 a.m.10 views

BlackVue DR750-2CH LTE 安全漏洞

BlackVue DR750-2CH LTE is an in-vehicle full HD monitor from BlackVue. A security vulnerability exists in BlackVue DR750-2CH LTE v.1.0122022.10.26. An attacker exploited the vulnerability to easily crack the default password via brute force attack...

9.8CVSS8.5AI score0.01752EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/04/13 12:00 a.m.21 views

PT-2023-21316 · Blackvue · Blackvue Dr750-2Ch Lte

Name of the Vulnerable Software and Affected Versions: BlackVue DR750-2CH LTE version 1.012 2022.10.26 Description: The issue concerns a weak default passphrase that can be easily cracked via a brute force attack if the WPA2 handshake is intercepted. This allows for potential unauthorized access...

9.8CVSS9.2AI score0.01752EPSS
SaveExploits1References6
CVE
CVE
added 2023/04/13 12:00 a.m.91 views

CVE-2023-27746

CVE-2023-27746 affects BlackVue DR750-2CH LTE (v.1.012_2022.10.26). The issue is a weak default passphrase that can be cracked via brute force if the WPA2 handshake is intercepted, enabling unauthorized access. Exploitation status is not provided in the documents. Remediation guidance is present ...

9.8CVSS9.3AI score0.01752EPSS
SaveExploits1References4Affected Software1
Packet Storm
Packet Storm
added 2023/04/12 12:00 a.m.261 views

Sielco Radio Link 2.06 Cookie Brute Force

Sielco Radio Link 2.06 'id' Cookie Brute Force Session Hijacking Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: 2.06 RTX19 2.05 RTX19 2.00 EXC19 1.60 RTX19 1.59 RTX19 1.55 EXC19 Summary: Sielco develops and produces radio links for all transmission and reception...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/04/12 12:00 a.m.284 views

Sielco PolyEco Digital FM Transmitter 2.0.6 Cookie Brute Force

Sielco PolyEco Digital FM Transmitter 2.0.6 'polyeco' Session Hijacking Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: PolyEco1000 CPU:2.0.6 FPGA:10.19 PolyEco1000 CPU:1.9.4 FPGA:10.19 PolyEco1000 CPU:1.9.3 FPGA:10.19 PolyEco500 CPU:1.7.0 FPGA:10.16 PolyEco300...

6.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2023/04/12 12:00 a.m.300 views

Sielco Analog FM Transmitter 2.12 Cookie Brute Force

Sielco Analog FM Transmitter 2.12 'id' Cookie Brute Force Session Hijacking Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: 2.12 EXC5000GX 2.12 EXC120GX 2.11 EXC300GX 2.10 EXC1600GX 2.10 EXC2000GX 2.08 EXC1600GX 2.08 EXC1000GX 2.07 EXC3000GX 2.06 EXC5000GX 1.7.7...

6.8AI score
SaveExploits0
zdt
zdt
added 2023/04/12 12:00 a.m.270 views

Sielco Analog FM Transmitter 2.12 Cookie Brute Force Vulnerability

Sielco Analog FM Transmitter 2.12 'id' Cookie Brute Force Session Hijacking Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: 2.12 EXC5000GX 2.12 EXC120GX 2.11 EXC300GX 2.10 EXC1600GX 2.10 EXC2000GX 2.08 EXC1600GX 2.08 EXC1000GX 2.07 EXC3000GX 2.06 EXC5000GX 1.7.7...

7.4AI score
SaveExploits0
NCSC
NCSC
added 2023/04/12 12:00 a.m.13 views

Vulnerabilities fixed in FortiOS and FortiProxy

Fortinet has fixed vulnerabilities in FortiOS and FortiProxy. A malicious person with access to the management interface can exploit the vulnerability with attribute CVE-2022-41330 to exploit it to perform a cross-site scripting XSS attack. Such an attack can lead to execution of arbitrary code i...

8.8CVSS6.5AI score0.00645EPSS
SaveExploits0
OSV
OSV
added 2023/04/11 5:15 p.m.6 views

CVE-2022-43947

An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...

8.8CVSS5.8AI score0.00405EPSS
SaveExploits0References1
NVD
NVD
added 2023/04/11 5:15 p.m.22 views

CVE-2022-43947

An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...

8.8CVSS6.8AI score0.00405EPSS
SaveExploits0References1
Prion
Prion
added 2023/04/11 5:15 p.m.18 views

Authentication flaw

An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...

6.5CVSS8.7AI score0.00405EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2023/04/11 4:07 p.m.14 views

CVE-2022-43947

An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...

5CVSS7AI score0.00405EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/11 4:07 p.m.107 views

CVE-2022-43947

CVE-2022-43947 is an authenticated brute-force vulnerability in Fortinet FortiOS and FortiProxy. Affected: FortiOS 7.2.0–7.2.3 and before 7.0.10; FortiProxy 7.2.0–7.2.2 and before 7.0.8. Root cause: improper restriction of excessive authentication attempts (CWE-307) that enables an attacker with ...

8.8CVSS8.7AI score0.00405EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/04/11 4:07 p.m.35 views

CVE-2022-43947

An improper restriction of excessive authentication attempts vulnerability CWE-307 in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 administrative interface allows an attacker with a valid user account to perform brute-forc...

5CVSS8.9AI score0.00405EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.6 views

PT-2023-7425 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.0 through 7.2.3 FortiOS versions prior to 7.0.10 FortiProxy versions 7.2.0 through 7.2.2 FortiProxy versions prior to 7.0.8 Description: The issue is related to an improper restriction of excessive authentication attempts...

8.8CVSS8.6AI score0.00405EPSS
SaveExploits0References6
Fortinet
Fortinet
added 2023/04/11 12:00 a.m.79 views

Anti brute-force bypass in administrative interface

...

8.8CVSS8.4AI score0.00405EPSS
SaveExploits0
Rows per page
Query Builder