CVE-2025-6074

CVE-2025-6074 concerns ABB RMC-100 and ABB RMC-100 LITE. The issue is a use of a hard-coded cryptographic key that enables bypassing REST interface authentication, allowing an attacker who has access to the source code and control network to gain access to MQTT configuration data when the REST in...

CVE-2025-6074 Authentication Bypass to the MQTT configuration Web Interface

Use of Hard-coded Cryptographic Key vulnerability in ABB RMC-100, ABB RMC-100 LITE. When the REST interface is enabled by the user, and an attacker gains access to source code and control network, the attacker can bypass the REST interface authentication and gain access to MQTT configuration data...

Vulnerability fixed in Cisco Unified Communications Manager

Cisco has fixed a vulnerability in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition. The vulnerability is in the hard-coded root SSH credentials that cannot be changed or deleted. This allows unauthenticated remote attackers to log in and...

ABB RMC-100 安全漏洞

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurements, asset data centralization for large production and transmission facilities. A security vulnerability exists in the ABB RMC-100 that stems from the use of hard-coded...

ABB RMC-100 安全漏洞

The ABB RMC-100 is a remote modular controller from ABB Switzerland. Capable of managing automation, liquid and gas measurement, asset data centralization for large production and transmission facilities. ABB RMC-100 has a security vulnerability that stems from the use of hard-coded encryption ke...

PT-2025-27818 · Abb · Abb Rmc-100 +1

Name of the Vulnerable Software and Affected Versions: ABB RMC-100 versions 2105457-043 through 2105457-045 ABB RMC-100 LITE versions 2106229-015 through 2106229-016 Description: The issue is related to the use of a hard-coded cryptographic key. When the REST interface is enabled and an attacker...

CVE-2025-6932

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

ENENSYS IPGuard v2 安全漏洞

ENENSYS IPGuard v2 is a software from ENENSYS France for securing IP streaming transmissions. A security vulnerability exists in ENENSYS IPGuard v2 version 2.10.0 that originates from hard-coded credentials...

CVE-2025-6932

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

CVE-2025-6932

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

CVE-2025-6932 D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

CVE-2025-6932 D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password

A vulnerability, which was classified as problematic, was found in D-Link DCS-7517 up to 2.02.0. This affects the function gFnGenPassForQlync of the file /bin/httpd of the component Qlync Password Generation Handler. The manipulation leads to use of hard-coded password. It is possible to initiate...

CVE-2025-6932

CVE-2025-6932 affects D-Link DCS-7517 (firmware up to 2.02.0) due to a vulnerability in the Qlync Password Generation Handler’s function g_F_n_GenPassForQlync in /bin/httpd. The root cause is the use of a hard-coded password, enabling remote initiation of an attack. Public disclosures exist, but ...

D-Link DCS-7517 安全漏洞

D-Link DCS-7517 is a network camera from China AUO D-Link. A trust management issue vulnerability exists in the D-Link DCS-7517 version 2.02.0 and earlier, which stems from the use of hard-coded passwords. An attacker could exploit the vulnerability to cause confidentiality to be compromised...

PT-2025-27483 · D Link · D-Link Dcs-7517

Name of the Vulnerable Software and Affected Versions: D-Link DCS-7517 versions up to 2.02.0 Description: A vulnerability was found in the Qlync Password Generation Handler component, affecting the function g F n GenPassForQlync of the file /bin/httpd. The manipulation leads to the use of...

CVE-2025-47818

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection...

CVE-2025-6669

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file middlewares/jwt.go. The manipulation with the input sublink leads to use of hard-coded cryptographic key . The attack can be initiated remotely. Th...

CVE-2025-47818

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection...

CVE-2025-47818

Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection...

PT-2025-27034 · Flock Safety · Flock Safety Gunshot Detection

Name of the Vulnerable Software and Affected Versions: Flock Safety Gunshot Detection devices versions prior to 1.3 Description: The issue concerns a hard-coded password for a connection in Flock Safety Gunshot Detection devices. This hardcoded password allows for unauthenticated access to the...