Moxa AWK-3131A multiple iw_* utilities Use of Hard-coded Credentials Vulnerability

Summary An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. Tested Versions Moxa...

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

A critical flaw in the High Availability HA service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Cisco Smart Software...

Auto-Maskin RP210E, DCU210E, and Marine Observer Pro (Android App)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Auto-Maskin Equipment: RP 210E Remote Panels, DCU 210E Control Units, and Marine Observer Pro Android App Vulnerabilities: Cleartext Transmission of Sensitive Information, Origin Validation Error,...

CVE-2014-9614: Use of Hard-coded Credentials

The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/...

CVE-2020-3158: Use of Hard-coded Credentials

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

Hardcoded credentials

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4392

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

CVE-2019-4392: Use of Hard-coded Credentials

HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system...

PT-2020-10947

Name of the Vulnerable Software and Affected Versions HCL AppScan Standard Edition versions 9.0.3.13 and earlier Description The issue concerns the use of hard-coded credentials, which can be exploited by attackers to gain unauthorized access to the system. Recommendations For HCL AppScan Standar...

Opencast Trust Management Issues Vulnerabilities

Opencast is a free and open source video management solution that is scalable, customizable and low cost. A trust management issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from the lack of an effective trust management mechanism in a network...

CVE-2013-6362: Use of Hard-coded Credentials

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

CVE-2013-6236

IZON IP 2.0.2: hard-coded password vulnerability...

CVE-2013-6236

IZON IP 2.0.2: hard-coded password vulnerability...

CVE-2013-6236

CVE-2013-6236 affects Stem Innovation IZON IP cameras (Firmware 2.0.2). The vulnerability arises from hard-coded credentials in the device’s Linux distribution and hidden web application, enabling unauthenticated access to the camera via Telnet/HTTP and exposing streams and configuration data. Po...

CVE-2013-6236: Use of Hard-coded Credentials

IZON IP 2.0.2: hard-coded password vulnerability...

PT-2020-7541

Name of the Vulnerable Software and Affected Versions: IZON IP version 2.0.2 Description: The issue is related to a hard-coded password, which could potentially allow unauthorized access. Recommendations: For IZON IP version 2.0.2, update the device to remove the hard-coded password to mitigate t...

CVE-2012-6611: Use of Hard-coded Credentials

An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password...

CVE-2012-4381: Use of Hard-coded Credentials

MediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, 1 which could make it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack or, 2 when an authentication plugin returns a false in the strict function, could allow remo...