D-Link DGS-1500 Ax Device Hardcoded Password Vulnerability

The D-Link DGS-1500 Ax devices is a switch device from AUO. The D-Link DGS-1500 Ax devices use hard-coded passwords that allow remote attackers to exploit vulnerabilities by submitting specially crafted requests for unauthorized access to the devices...

PT-2017-18067

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 6.3.x through 6.4.x before patch 130 EMC Data Protection Advisor versions 6.3.x before patch 67 Description The issue concerns undocumented accounts with hard-coded passwords and various privileges. The...

D-Link DIR-850L REV.B Privilege Acquisition Vulnerability

The D-Link DIR-850L REV.B is a wireless router from AUO D-Link. A security vulnerability exists in the D-Link DIR-850L REV.B using firmware FW208WWb02 and prior versions, which stems from the use of hard-coded passwords for the Alphanetworks account. A remote attacker can exploit the vulnerabilit...

New Bill Seeks Basic IoT Security Standards

Lawmakers in the U.S. Senate today introduced a bill that would set baseline security standards for the government's purchase and use of a broad range of Internet-connected devices, including computers, routers and security cameras. The legislation, which also seeks to remedy some widely-perceive...

Belkin NetCam F7D7601 Remote Command Execution / Hard-Coded Passwords

Exploit Title: Belkin NetCam F7D7601 | Remote Command Execution Date: 17/07/17 Exploit Author: Wadeek Vendor Homepage: http://www.belkin.com/ Tested on: Belkin NetCam F7D7601 WeMoNetCamWW2.00.10684.PVT ================================================ UnsetupMode == 0 Hard-coded password admin:adm...

CVE-2016-9358

A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520,...

CVE-2016-9358

A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520,...

CVE-2016-9358

A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal associated with the following systems: A320, A325, A371, A520 Master, A520 Slave, A530, A542, A571, Check Bin Grader, FlowlineQC T376, IPM3 Dual Cam v132, IPM3 Dual Cam v139, IPM3 Single Cam v132, P520,...

CVE-2016-9358

CVE-2016-9358 is a hard-coded passwords vulnerability affecting Marel Food Processing Systems, notably the M3000 terminal and related components (M3210 terminal, M3000 desktop software, MAC4 controller, SensorX/X-ray and MWS2 devices) across numerous systems (A320, A325, A371, A520 Master/Slave, ...

Schneider Electric U.motion Builder Hardcoded Remote Code Execution Vulnerability

U.motion Builder is a builder product from Schneider Electric France. A hard-coded remote code execution vulnerability exists in Schneider Electric U.motion Builder. The web service comes with a hidden system account that contains hard-coded passwords. An attacker could exploit the vulnerability ...

Hard-coded Passwords Make Hacking Foscam ‘IP Cameras’ Much Easier

Security researchers have discovered over a dozen of vulnerabilities in tens of thousands of web-connected cameras that can not be protected just by changing their default credentials. Vulnerabilities found in two models of IP cameras from China-based manufacturer Foscam allow attackers to take...

Cisco Unified Contact Center Enterprise Information Disclosure Vulnerability (CNVD-2017-08798)

Cisco Unified Contact Center Enterprise UCCE is a set of IP-based contact center components from Cisco. It provides intelligent contact routing, call processing, network-to-desktop computer telephony integration CTI, and multi-channel contact management capabilities over an IP infrastructure. A...

Hyundai Motor America Blue Link Sensitive Information Disclosure Vulnerability

Hyundai Motor America Blue Link is a remote wireless remote control device for use in automobiles. A sensitive information disclosure vulnerability exists in Hyundai Motor America Blue Link versions 3.9.5 and 3.9.4, which stems from the program's use of hard-coded passwords. An attacker could...

PT-2017-2831

Name of the Vulnerable Software and Affected Versions Marel Food Processing Systems M3000 terminal affected versions not specified Marel Food Processing Systems M3210 terminal affected versions not specified Marel Food Processing Systems M3000 desktop software affected versions not specified Mare...

Marel Food Processing Systems

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Marel Equipment: Food Processing Systems Vulnerabilities: Hard-Coded Passwords, Unrestricted Upload AFFECTED PRODUCTS The following Marel food processing products are affected: M3000 terminal associated with the...

Marel Food Processing Systems (Update A)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Marel Equipment: Food Processing Systems Vulnerabilities: Hard-Coded Passwords, Unrestricted Upload, Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...

Marel Food Processing Systems (Update B)

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Marel Equipment: Food Processing Systems Vulnerabilities: Hard-Coded Passwords, Unrestricted Upload, Improper Access Control UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled...

ICSMA-17-082-01_BD Kiestra PerformA and KLA Journal Service Applications Hard-Coded Passwords Vulnerability

OVERVIEW Becton, Dickinson and Company BD has identified a hard-coded password vulnerability in BD’s Kiestra PerformA and KLA Journal Service applications that access the BD Kiestra Database. BD has produced compensating controls to reduce the risk of exploitation of the identified vulnerability ...

CVE-2016-8567

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...

CVE-2016-8567

An issue was discovered in Siemens SICAM PAS before 8.00. A factory account with hard-coded passwords is present in the SICAM PAS installations. Attackers might gain privileged access to the database over Port 2638/TCP...