CVE-2024-5245

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must first obtain the ability to execute...

CVE-2024-5245

CVE-2024-5245 — NETGEAR ProSAFE Network Management System involves a local privilege-escalation vulnerability caused by default MySQL credentials in the product installer. An attacker who can run low-privileged code locally can leverage these credentials to escalate privileges to SYSTEM and execu...

CVE-2024-5245 NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must first obtain the ability to execute...

CVE-2024-5245 NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. An attacker must first obtain the ability to execute...

NETGEAR ProSAFE Network Management System 安全漏洞

NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. An elevation of privilege vulnerability exists in NETGEAR ProSAFE Network Management System, which stems from the use of default MySQ...

CVE-2024-4622

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator...

CVE-2024-4622 alpitronic Hypercharger EV Charger Use of Default Credentials

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator...

CVE-2024-4622

CVE-2024-4622 affects alpitronic Hypercharger EV charging devices. When credentials are left at defaults, an attacker can gain administrator access to the device via the web interface. The vulnerability is network-exposed with low attack complexity and can impact availability (HIGH) and confident...

CVE-2024-4622 alpitronic Hypercharger EV Charger Use of Default Credentials

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator...

Hypercharger EV Charger 安全漏洞

The Hypercharger EV Charger is a class of high power electric vehicle EV chargers from Hypercharger. A security vulnerability exists in the Hypercharger EV Charger that stems from the use of default credentials, which allows an attacker to access the device as an administrator using public...

PT-2024-31925 · Alpitronic · Alpitronic Hypercharger Ev Charging Devices

Name of the Vulnerable Software and Affected Versions: alpitronic Hypercharger EV charging devices affected versions not specified Description: The issue concerns alpitronic Hypercharger EV charging devices that can expose a web interface protected by authentication if misconfigured. If the defau...

alpitronic Hypercharger EV charger

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.3 ATTENTION: Exploitable remotely/Low attack complexity Vendor: alpitronic Equipment: Hypercharger EV charger Vulnerability: Use of Default Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker disabling...

ICT MIFARE DESFire 安全漏洞

ICT MIFARE DESFire is an advanced encryption technology from ICT. A security vulnerability exists in ICT MIFARE DESFire that stems from insecure storage of encryption keys and a binary file that allows malicious actors to create credentials for any site code and card number using default values...

CVE-2023-32145

Consolidated view of CVE-2023-32145: D-Link DAP-1360 devices are affected by a hardcoded credentials authentication bypass in the web UI login handling. This enables network-adjacent attackers to bypass authentication without user interaction. The vulnerability scores high (CVSSv3.1: AV=A, AC:L, ...

CVE-2024-0840 Grandstream UCM Series IP PBX HTTP Parameter Injection

The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and...

CVE-2024-0840 Grandstream UCM Series IP PBX HTTP Parameter Injection

The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability in the HTTP interface. A remote and authenticated attacker can execute arbitrary code by sending a crafted HTTP request. Authentication may be possible using a default user and...

CVE-2024-2859

By default, SANnav OVA is shipped with root user login enabled. While protected by a password, access to root could expose SANnav to a remote attacker should they gain access to the root account...

PT-2024-14067 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Foxy Fitzroy version 2 Description: An issue in the default configurations of ROS2 allows unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Foxy Fitzroy version 2, change the default credentia...

CVE-2024-29844

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...

CVE-2024-29844

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...