Lucene search
K

8092 matches found

CNVD
CNVD
added 2021/02/20 12:0 a.m.6 views

IBM Security Verify Information Queue Hardcoded Credentials Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A hard-coded credentials vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit the...

7.5CVSS6.5AI score0.00065EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.6 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11333)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded telecomadmin/nE7jA%5m credentials against an ISP. No detailed vulnerability details are available at this tim...

9.8CVSS6.8AI score0.00465EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.8 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11335)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded gestiontelebucaramanga/t3l3buc4r4m4ng42013 credentials against an ISP. No detailed vulnerability details are...

9.8CVSS6.8AI score0.00699EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.6 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11328)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/user1234 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.00681EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.5 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11334)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded adminpldt/z6dUABtl270qRxt7a2uGTiw credentials against an ISP. No detailed vulnerability details are provided a...

9.8CVSS6.8AI score0.00465EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.5 views

FiberHome HG6245D Hardcoded GEPON Password Vulnerability

The HG6245D is an FTTH ONT router from FiberHome. The FiberHome HG6245D is vulnerable to a hard-coded GEPON password vulnerability. The vulnerability stems from a hardcoded GEPON password defined in /etc/init.d/system-config.sh. No detailed vulnerability details are provided at this time...

9.8CVSS6.8AI score0.00639EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/20 12:0 a.m.6 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11329)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded fi!b@er$h%o^mesuperadmin/sfuh+g|u credentials against an ISP. No details of the vulnerability are provided at...

9.8CVSS6.8AI score0.00681EPSS
Exploits1References1
Schneier on Security
Schneier on Security
added 2021/02/19 12:0 p.m.53 views

Router Security

This report is six months old, and I dont know anything about the organization that produced it, but it has some alarming data about router security. Conclusion: Our analysis showed that Linux is the most used OS running on more than 90% of the devices. However, many routers are powered by very o...

0.1AI score
Exploits0
NVD
NVD
added 2021/02/18 12:15 a.m.17 views

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

8.8CVSS0.00222EPSS
Exploits1References4
OSV
OSV
added 2021/02/18 12:15 a.m.2 views

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

8.8CVSS7.3AI score
Exploits0References4
Prion
Prion
added 2021/02/18 12:15 a.m.10 views

Hardcoded credentials

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

5.8CVSS8.7AI score0.00222EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2021/02/17 11:11 p.m.16 views

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

8.8CVSS8.8AI score0.00222EPSS
Exploits1References4
CVE
CVE
added 2021/02/17 11:11 p.m.79 views

CVE-2020-9306

CVE-2020-9306 affects Digi ConnectPort X2e devices (SolarCity/Tesla branding) with hardcoded credentials stored in a .pyc-compiled file used at boot. FireEye analysis shows password_manager.pyc in /WEB/python/ contains five plaintext credentials for the python system user, enabling web and SSH ac...

8.8CVSS8.7AI score0.00222EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/02/17 2:15 p.m.2 views

CVE-2020-12376

Use of hard-coded key in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access...

5.5CVSS6.1AI score0.00051EPSS
Exploits0References1
Prion
Prion
added 2021/02/17 2:15 p.m.12 views

Hardcoded credentials

Use of hard-coded key in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow authenticated user to potentially enable information disclosure via local access...

2.1CVSS5.2AI score0.00051EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.3 views

Hamilton-medical Hamilton-T1 Trust Management Issues Vulnerability

The Hamilton-medical Hamilton-T1 is an industrial control device from Hamilton-medical USA. It combines the functionality of a full-featured ICU ventilator with the compactness and ruggedness required for transport Functionality. A trust management issue vulnerability exists in the Hamilton-medic...

5.2CVSS6.1AI score0.00051EPSS
Exploits0References3
OSV
OSV
added 2021/02/12 5:15 p.m.1 views

CVE-2021-20412

IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192...

7.5CVSS5.8AI score0.00065EPSS
Exploits0References2
NVD
NVD
added 2021/02/12 5:15 p.m.10 views

CVE-2021-20412

IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192...

7.5CVSS0.00065EPSS
Exploits0References2
CVE
CVE
added 2021/02/12 4:35 p.m.59 views

CVE-2021-20412

CVE-2021-20412 affects IBM Security Verify Information Queue (ISIQ) 1.0.6 and 1.0.7, where a hard-coded credential (a signing key for Grafana in the logs stack) is stored in the Grafana initialization file. The IBM security bulletin confirms the presence of hard-coded credentials and notes the si...

7.5CVSS7.4AI score0.00065EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/12 4:35 p.m.7 views

CVE-2021-20412

IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192...

5.9CVSS7.4AI score0.00065EPSS
Exploits0References2
Rows per page
Query Builder