CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...

CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2

SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes...

CVE-2023-37287: Use of Hard-coded Credentials

SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes...

CVE-2023-37286: Use of Hard-coded Credentials

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...

PT-2023-25885

Name of the Vulnerable Software and Affected Versions SmartBPM.NET affected versions not specified Description The issue concerns a path traversal vulnerability within the file download function of SmartBPM.NET, allowing an unauthenticated remote attacker to access arbitrary system files...

PT-2023-25883 · Smartisoft · Smartbpm.Net

Name of the Vulnerable Software and Affected Versions: SmartSoft SmartBPM.NET affected versions not specified Description: The issue is related to the use of a hard-coded machine key in SmartSoft SmartBPM.NET. This allows an unauthenticated remote attacker to send a serialized payload to the...

PT-2023-25884

Name of the Vulnerable Software and Affected Versions SmartBPM.NET affected versions not specified Description The issue is related to the use of a hard-coded authentication key. An unauthenticated remote attacker can exploit this to access the system with regular user privilege, allowing them to...

SmartSoft SmartBPM.NET Trust Management Vulnerability

SmartSoft SmartBPM.NET is an enterprise process management platform from China-based SmartSoft. A vulnerability in SmartSoft SmartBPM.NET exists due to a trust management issue that arises from the use of hard-coded machine keys...

SmartSoft SmartBPM.NET Trust Management Vulnerability

SmartSoft SmartBPM.NET is an enterprise process management platform from China-based SmartSoft Technologies SmartSoft. A trust management issue vulnerability exists in SmartSoft SmartBPM.NET that stems from the use of hard-coded authentication keys...

CVE-2023-35987

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

Hardcoded credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-35987

CVE-2023-35987 concerns hard-coded credentials in PiiGAB M-Bus authentication. The vulnerability affects the M-Bus SoftwarePack 900S product family and is described in multiple sources (ICS/CISA advisory and CVE records). Root cause: hard-coded credentials used for authentication, enabling remote...

CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

Exploit for Use of Hard-coded Credentials in Clickstudios Passwordstate

CVE-20...

PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

CVE-2023-35987: Use of Hard-coded Credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-22844: Use of Hard-coded Cryptographic Key

An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2. A specially-crafted network request can lead to authentication bypass. An attacker can send a network request to trigger this vulnerability...

PT-2023-25405 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns hard-coded credentials used for authentication in PiiGAB M-Bus. No information is provided about the estimated number of potentially affected devices or real-world...

PiiGAB M-Bus 900S Trust Management Vulnerability

PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A vulnerability with trust management issues exists in PiiGAB M-Bus version 900S, which stems from the inclusion of hard-coded credentials for authentication...

CVE-2023-36623

The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges...