CVE-2024-27170: Use of Hard-coded Credentials

It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it is possible to get a full access with WebDAV to the printer. As for the affected products/models/versions, see the reference URL...

CVE-2024-27168: Use of Hard-coded Credentials

It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow attackers to bypass authentication and reach administrative interfaces. As for the affected products/models/versions, see the reference URL...

CVE-2024-27159: Use of Hard-coded Credentials

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for th...

CVE-2024-27160: Use of Hard-coded Credentials

All the Toshiba printers contain a shell script using the same hardcoded key to encrypt logs. An attacker can decrypt the encrypted files using the hardcoded key. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for th...

TRENDnet TEW-814DAP Security Vulnerability

The TRENDnet TEW-814DAP is a wireless access point from Trendnet, Inc. A security vulnerability exists in the TRENDnet TEW-814DAP v1FW1.01B01 version that stems from a hard-coded password vulnerability in /etc/shadow.sample that allows an attacker to log in as root...

CVE-2024-27161: Use of Hard-coded Credentials

all the Toshiba printers have programs containing a hardcoded key used to encrypt files. An attacker can decrypt the encrypted files using the hardcoded key. Insecure algorithm is used for the encryption. This vulnerability can be executed in combination with other vulnerabilities and difficult t...

CVE-2024-38281

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-38281

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

Motorola Solutions Vigilant License Plate Readers

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Motorola Solutions Equipment : Vigilant Fixed LPR Coms Box BCAV1F2-C600 Vulnerabilities : Authentication Bypass Using an Alternate Path or Channel, Cleartext Storage in a File or on Disk, Us...

Motorola Solutions Vigilant Fixed LPR Coms Box Trust Management Issues Vulnerability

Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. The Motorola Solutions Vigilant Fixed LPR Coms Box suffers from a trust management issue vulnerability that stems from an attacker being able to access the maintenance console using...

D-Link DIR-605L security vulnerabilities

The D-Link DIR-605L is a wireless router from China's AUO D-Link. A hard-coded password vulnerability exists in D-Link DIR-605L v2.13B01, which can be exploited by an attacker to log in as root and gain administrator privileges...

CVE-2024-38281: Use of Hard-coded Credentials

An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...

PT-2024-27920 · Motorola Solutions +1 · Vigilant Fixed Lpr Coms Box +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker can access the maintenance console using hard-coded credentials for a hidden wireless network on the device. Recommendations: At the moment,...

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

CVE-2024-0865

CVE-2024-0865 affects Schneider Electric EcoStruxure IT Gateway (installer). Root cause: hard-coded credentials in the installer enable local privilege escalation for users with low privileges; attacker must already execute code locally. Exploitation details are described in ZDI reports (local es...

CVE-2024-0865

CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...

Apache Submarine Commons Utils has a hard-coded secret

Improper Authentication vulnerability in Apache Submarine Commons Utils. This issue affects Apache Submarine Commons Utils: from 0.8.0. As this project is retired, we do not plan to release a version that fixes this issue. If the user doesn't explicitly set submarine.auth.default.secret, a defaul...