Lucene search
+L

11878 matches found

osv_cve
osv_cve
•added 2021/04/08 6:15 p.m.•19 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.5CVSS7.1AI score0.00594EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/04/08 5:52 p.m.•46 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.4AI score0.00594EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/08 12:00 a.m.•7 views

PT-2021-9689

Name of the Vulnerable Software and Affected Versions Xiaomi router AX1800 rom versions prior to 1.0.336 Xiaomi router RM1800 root versions prior to 1.0.26 Description The encryption scheme for user backup files uses hard-coded keys, potentially exposing sensitive information such as user...

7.5CVSS0.00594EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/04/08 12:00 a.m.•24 views

Xiaomi Router AX1800 has a trust management issue vulnerability

Xiaomi router AX1800 is a router from China-based Xiaomi. A security vulnerability exists in Xiaomi router AX1800 rom version prior to 1.0.336 and RM1800 root version prior to 1.0.26, which stems from the encryption scheme of the user's backup file using a hard-coded key...

7.5CVSS7.3AI score0.00594EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/08 12:00 a.m.•12 views

CVE-2020-14099: Use of Hard-coded Credentials

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.5CVSS5.8AI score0.00594EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/03/30 6:15 p.m.•21 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS6.1AI score0.00219EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/30 6:15 p.m.•33 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS0.00219EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/30 6:15 p.m.•36 views

Hardcoded credentials

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

2.1CVSS5.2AI score0.00219EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/03/30 6:15 p.m.•15 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0References2
CVE
CVE
•added 2021/03/30 5:27 p.m.•109 views

CVE-2021-26579

CVE-2021-26579 describes a vulnerability in HPE Unified Data Management (UDM) where a hard-coded cryptographic key in the product can lead to local disclosure of privileged information (CWE-321). The issue is addressed by HPE in UDM versions, with updates to 1.2009.0 and 1.2101.0, and a cleanup i...

5.5CVSS5.2AI score0.00219EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/30 5:27 p.m.•47 views

CVE-2021-26579

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/03/30 12:00 a.m.•25 views

HPE Unified Data Management Trust Management Vulnerability

HPE Unified Data Management is a software application from HPE America. It provides a management function. A security vulnerability exists in HPE Unified Data Management that originates from a hard-coded encryption key that allows local disclosure of privileged information...

5.5CVSS5.7AI score0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/30 12:00 a.m.•11 views

CVE-2021-26579: Use of Hard-coded Credentials

A security vulnerability in HPE Unified Data Management UDM could allow the local disclosure of privileged information CWE-321: Use of Hard-coded Cryptographic Key in a product. HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management UDM. Version 1.2103.0 of HPE...

5.5CVSS5.8AI score0.00219EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/30 12:00 a.m.•8 views

PT-2021-17056

Name of the Vulnerable Software and Affected Versions HPE Unified Data Management UDM versions prior to 1.2103.0 Description A security issue in HPE Unified Data Management UDM could allow the local disclosure of privileged information due to the use of hard-coded cryptographic keys...

5.5CVSS0.00219EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•28 views

MobileIron agent trust management vulnerabilities

MobileIron agents is a software application from MobileIron, Inc. It is used for MobileIron agents. A trust management issue vulnerability exists in versions of MobileIron agents prior to 2021-03-22, which stems from the inclusion of a hard-coded API key used to communicate with the MobileIron Sa...

7.5CVSS7.3AI score0.01556EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/03/29 12:00 a.m.•26 views

MobileIron agent trust management vulnerabilities

MobileIron agents is an application from MobileIron USA. It is used for MobileIron agents. MobileIron agents versions 2021-03-22 and earlier are vulnerable to a trust management issue that stems from the inclusion of a hard-coded encryption key that is used to encrypt the submission of...

9.8CVSS5.6AI score0.01186EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2021/03/25 8:15 p.m.•17 views

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

7.8CVSS7.1AI score0.00272EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/25 8:15 p.m.•45 views

CVE-2021-27452

The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E all firmware versions prior to v04A00.1...

7.8CVSS0.00272EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/25 8:15 p.m.•37 views

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

9.8CVSS0.01399EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/03/25 8:15 p.m.•25 views

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

8.8CVSS5.8AI score0.01254EPSS
SaveExploits0References1
Rows per page
Query Builder