CVE-2023-6198

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

CVE-2023-6198

The CVE-2023-6198 entry describes a Hard-coded Credential vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules). The issue enables unauthorized access to the device due to hard-coded credentials used by the appliance, as summarized in multiple sources (NVD/Red Hat/CVE...

CVE-2023-6198 Hard Coded Credential

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

CVE-2023-6198 Hard Coded Credential

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

Baicells Snap Router Security Vulnerability

Baicells Snap Router is a series of routers from Baicells USA. A security vulnerability exists in Baicells Snap Router BaiCEBMI EP3011, which stems from a hard-coded credentials vulnerability in the application that allows unauthorized access to the device...

PT-2024-36391

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions before v9.0.0 Description A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature could allow an authenticated, remote attacker to read data from an affected device via SNM...

PT-2024-14898

Name of the Vulnerable Software and Affected Versions Baicells Snap Router BaiCE BMI on EP3011 affected versions not specified Description The issue concerns the use of hard-coded credentials in the User Passwords modules, allowing unauthorized access to the device. This could potentially lead to...

CVE-2023-6198: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCEBMI on EP3011 User Passwords modules allows unauthorized access to the device...

CVE-2024-36496: Use of Hard-coded Credentials

The configuration file is encrypted with a static key derived from a static five-character password which allows an attacker to decrypt this file. The application hashes this five-character password with the outdated and broken MD5 algorithm no salt and uses the first five bytes as the key for RC...

H3C Magic R230 security vulnerabilities

Magic R230 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the Magic R230 V100R002 of Xinhua San Technologies Co. The vulnerability stems from a hard-coded password vulnerability in /etc/shadow, which can be exploited by an attacker to log in as root...

CVE-2024-38902: Use of Hard-coded Password

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

Streamline NX Client < 3.4.3.2 / 3.5.x < 3.5.1.202 / 3.6.x < 3.6.2.2 / 3.7.x < 3.7.2.1 Privilege Escalation (2024-000005)

The version of Streamline NX Client installed on the remote host is prior to 3.4.3.2, 3.5.1.202, 3.6.2.2, or 3.7.2.1. It is, therefore, affected by a vulnerability as referenced in the 2024-000005 advisory. - Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 an...

CVE-2024-38618

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to ...

CVE-2023-49113

The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the Kiuwan Local Analyzer. The JAR file...

CVE-2023-49113

The Kiuwan Local Analyzer (KLA) Java scanning application contains multiple hard-coded secrets in plain text format within its JAR files. Specifically, the lib.engine/insight/optimyth-insight.jar file contains InsightServicesConfig.properties, which exposes valid GitHub credentials (insight.githu...

CVE-2023-49113 Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer

The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the Kiuwan Local Analyzer. The JAR file...

CVE-2023-49113 Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer

The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the Kiuwan Local Analyzer. The JAR file...

CVE-2023-49113: Cleartext Storage of Sensitive Information

The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format. In some cases, this can potentially compromise the confidentiality of the scan results. Several credentials were found in the JAR files of the Kiuwan Local Analyzer. The JAR file...

PT-2024-13679 · Github · Github

Name of the Vulnerable Software and Affected Versions: Kiuwan SAST: versions prior to the fixed version Kiuwan Local Analyzer KLA affected versions not specified Description: The Kiuwan Local Analyzer KLA Java scanning application contains several hard-coded secrets in plain text format,...

DEBIAN-CVE-2024-38618

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Set lower bound of start tick time Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to ...