Lucene search
+L

8413 matches found

ATTACKERKB
ATTACKERKB
added 2023/09/19 2:15 p.m.6 views

CVE-2023-31808

Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled...

7.2CVSS5.7AI score0.00642EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/19 2:15 p.m.31 views

Hardcoded credentials

Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled...

5.8CVSS7.1AI score0.00642EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/19 12:0 a.m.21 views

CVE-2023-31808

Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled...

7.2AI score0.00642EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/19 12:0 a.m.96 views

CVE-2023-31808

The CVE-2023-31808 issue affects Technicolor TG670 devices, specifically firmware version 10.5.N.9, where multiple hard-coded service accounts grant administrative privileges. An attacker could gain unrestricted WAN access if Remote Administration is enabled. Public sources (NVD, Red Hat, CERT, P...

7.2CVSS7.1AI score0.00642EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.8 views

Technicolor TG670 Trust Management Issue Vulnerability

The Technicolor TG670 is a switch from Technicolor. A security vulnerability exists in the Technicolor TG670 version 10.5.N.9, which stems from the device containing multiple accounts with hard-coded passwords. This allows an attacker to gain unrestricted access through the WAN interface...

7.2CVSS7AI score0.00642EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/19 12:0 a.m.26 views

CVE-2023-31808

Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted access over the WAN interface if Remote Administration is enabled...

7.4AI score0.00642EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/18 7:15 p.m.24 views

CVE-2023-41030

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

9.8CVSS7.1AI score0.00583EPSS
SaveExploits0References1
OSV
OSV
added 2023/09/18 7:15 p.m.6 views

CVE-2023-41030

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits0References1
Prion
Prion
added 2023/09/18 7:15 p.m.22 views

Hardcoded credentials

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

5.8CVSS9.4AI score0.00583EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/18 6:22 p.m.11 views

CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

6.3CVSS7.1AI score0.00583EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/18 6:22 p.m.46 views

CVE-2023-41030

CVE-2023-41030 affects Juplink RX4-1500 wi-fi router. Vulnerable versions V1.0.2–V1.0.5 permit unauthenticated login to web interface or Telnet as the user user due to hard-coded credentials. Connected sources corroborate the affected versions and login as user; explicit exploitation details are ...

9.8CVSS7.1AI score0.00583EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/09/18 6:22 p.m.23 views

CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability

Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user...

6.3CVSS9.7AI score0.00583EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/09/18 12:0 a.m.7 views

Peppermint Trust Management Issues Vulnerabilities

Peppermint is an open source ticket management system from Peppermint Labs. PeppermintLabs A security vulnerability exists in Peppermint v.0.2.4 and earlier versions, which originated from a vulnerability that allows remote attackers to obtain sensitive information and execute arbitrary code via ...

8.8CVSS7.4AI score0.0116EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/18 12:0 a.m.8 views

Juplink RX4-1500 Trust Management Issue Vulnerability

The Juplink RX4-1500 is a wireless router from Juplink. A security vulnerability exists in the Juplink RX4-1500 versions V1.0.2 through V1.0.5, which stems from the use of hard-coded credentials, which allows an attacker to log in to the web interface or Telnet service as the user user...

9.8CVSS6.8AI score0.00583EPSS
SaveExploits0References3
OSV
OSV
added 2023/09/13 1:15 p.m.7 views

CVE-2023-40717

A use of hard-coded credentials vulnerability CWE-798 in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands...

7.8CVSS5.8AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
added 2023/09/13 1:15 p.m.30 views

CVE-2023-40717

A use of hard-coded credentials vulnerability CWE-798 in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands...

7.8CVSS5.9AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/09/13 12:29 p.m.33 views

CVE-2023-40717

A use of hard-coded credentials vulnerability CWE-798 in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands...

5.3CVSS7.8AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
added 2023/09/13 12:29 p.m.59 views

CVE-2023-40717

CVE-2023-40717 concerns FortiTester versions 2.3.0–7.2.3, where a hard-coded credentials flaw (CWE-798) could let an attacker who gains a shell on the device access the database via shell commands. The Red Hat and PTSecurity entries confirm the vulnerable platform and a local access path to reach...

7.8CVSS7.5AI score0.00191EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/09/13 12:0 a.m.6 views

FortiTester Trust Management Issues Vulnerabilities

FortiTester is a Fortinet professional-based network traffic testing tool from FortiTester, Inc. A security vulnerability exists in FortiTester versions 2.3.0 through 7.2.3, which stems from the presence of a hard-coded credentials vulnerability that could allow an attacker who successfully obtai...

7.8CVSS6.7AI score0.00191EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/09/12 12:0 a.m.8 views

Xpand IT Write-back manager Trust Management Issue Vulnerability

Xpand IT Write-back manager is an extension for Xpand IT. that allows users to enter data directly from Tableau dashboards into a database. A security vulnerability exists in Xpand IT Write-back manager version v2.3.1, which stems from the use of a hard-coded salt in the configuration of the...

6.5CVSS6.7AI score0.00263EPSS
SaveExploits0References5
Rows per page
Query Builder