Lucene search
+L

11854 matches found

Positive Technologies
Positive Technologies
•added 2021/11/26 12:00 a.m.•6 views

PT-2021-17078

Name of the Vulnerable Software and Affected Versions HejHome GKW-IC052 IP Camera affected versions not specified Description The issue allows remote attackers to operate the IP Camera, enabling actions such as reboot, factory reset, and snapshot. This is due to a hard-coded credentials...

9.8CVSS0.01164EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/26 12:00 a.m.•13 views

CVE-2021-26611: Use of Hard-coded Credentials

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.9AI score0.01164EPSS
SaveExploits0References3
NVD
NVD
•added 2021/11/23 8:15 p.m.•26 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS0.0107EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/11/23 8:15 p.m.•17 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS5.8AI score0.0107EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/23 8:00 p.m.•71 views

CVE-2021-36312

CVE-2021-36312 concerns Dell EMC CloudLink, affecting 7.1 and earlier. A hard-coded password vulnerability exists in CloudLink that could allow a remote, high-privileged attacker to gain unauthorized access to affected systems. The issue is documented across multiple sources (NVD entry and CNVD/C...

9.1CVSS8.9AI score0.0107EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/23 8:00 p.m.•30 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS9.2AI score0.0107EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/11/23 12:00 a.m.•24 views

ioLogik Hard-coded Password Privilege Escalation

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

10CVSS5.9AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/11/23 12:00 a.m.•9 views

PT-2021-21214

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions prior to 7.1 Description The issue concerns a hard-coded password that could allow a remote, high-privileged attacker with knowledge of the credentials to gain unauthorized access to the system. Recommendations For...

9.1CVSS0.0107EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/11/23 12:00 a.m.•16 views

Dell EMC CloudLink security vulnerabilities

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.A hard-coded password vulnerability exists in Dell EMC CloudLink 7.1 and earlier versions. An attacker could exploit this vulnerability to gain...

9.1CVSS5.6AI score0.0107EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/23 12:00 a.m.•8 views

CVE-2021-36312: Use of Hard-coded Password

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS6AI score0.0107EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/11/23 12:00 a.m.•13 views

NPort IAW5250A-6I/O Hard-coded Key Modification

The vulnerability of the NPort IAW5250A-6I/O serial interface converter is related to the use of a rigidly encoded cryptographic key. Exploiting this vulnerability could allow an attacker to modify the device’s firmware remotely...

9.4CVSS5.5AI score
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/11/18 3:34 p.m.•16 views

CVE-2021-43552

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX PIC iX Versions B.02, C.02, and C.03...

6.1CVSS6AI score0.00226EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/18 3:34 p.m.•12 views

CVE-2021-32993

IntelliBridge EC 40 and 60 Hub C.00.04 and prior contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

8.8CVSS7AI score0.0029EPSS
SaveExploits0References2
ICS
ICS
•added 2021/11/18 12:00 a.m.•52 views

Philips IntelliBridge EC 40 and EC 80 Hub

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Low attack complexity Vendor: Philips Equipment: IntelliBridge EC 40 and EC 80 Hub Vulnerabilities: Use of Hard-coded Credentials, Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of these...

8.8CVSS9.2AI score0.00483EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2021/11/10 4:15 p.m.•19 views

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

10CVSS5.8AI score0.01141EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/11/10 4:15 p.m.•12 views

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

10CVSS7.3AI score0.01141EPSS
SaveExploits1References3
CVE
CVE
•added 2021/11/10 3:57 p.m.•68 views

CVE-2021-40519

Airangel HSMX Gateway devices prior to version 5.2.04 have hard-coded PostgreSQL database credentials embedded in the configuration file, according to multiple sources. This root cause allows an attacker to connect to the HSMX database over the network, potentially enabling unauthorized access to...

10CVSS9.5AI score0.01141EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/11/10 3:57 p.m.•46 views

CVE-2021-40519

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials...

9.7AI score0.01141EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/11/10 12:00 a.m.•20 views

Airangel Hsmx Gateway: Trust management vulnerabilities

Airangel Hsmx Gateway is a platform from Airangel UK, Inc. A hard-coded credential vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from the use of PostgreSQL database credentials hard-coded in the configuration file. An attacker could steal this credential t...

10CVSS5.6AI score0.01141EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/11/10 12:00 a.m.•10 views

PT-2021-22916

Name of the Vulnerable Software and Affected Versions Airangel HSMX Gateway devices versions 5.2.04 and earlier Description The issue concerns hard-coded database credentials in the affected devices. This could potentially allow unauthorized access to the database. Recommendations For Airangel HS...

10CVSS0.01141EPSS
SaveExploits1References6
Rows per page
Query Builder