CVE-2024-29844 Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...

DirectCyber Evolution Controller 安全漏洞

DirectCyber Evolution Controller is an access control controller software from DirectCyber, Inc. that is used to controller physical access to facilities. A security vulnerability exists in DirectCyber Evolution Controller version 2.x and prior versions that stems from default credentials on the...

PT-2024-23082 · Unknown · Evolution Controller

Name of the Vulnerable Software and Affected Versions: Evolution Controller versions 2.x Description: The issue concerns default credentials on the Web Interface of the affected software, allowing unauthorized access to perform administrative functions. Upon installation or first login, the...

CVE-2024-29844: Use of Default Credentials

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...

CVE-2024-31069 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-31069 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-30210 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-31069: Use of Default Credentials

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-30210: Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

PT-2024-22903 · Unknown · Ros2 Humble Hawksbill

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill version 2 Description: An issue was discovered in the default configurations of ROS2 Humble Hawksbill, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS2 Humble Hawksbi...

CVE-2024-29447

ROS2 Humble Hawksbill (version 2) is identified in connected sources as having an issue where default configurations allow unauthenticated access via default credentials. This vulnerability surface is tied to the default credential behavior, enabling unauthorized access if defaults are not change...

CVE-2024-30711

CVE-2024-30711 entry is rejected/not used and does not represent an active vulnerability.

CVE-2024-30728

CVE-2024-30728 is rejected/withdrawn and does not represent an active vulnerability entry.

CVE-2024-30695

This CVE entry is rejected/not used as stated.

The vulnerability of the cross-platform BitTorrent client qBittorrent, which stems from the use of rigidly programmed credentials, allows a hacker to execute arbitrary commands.

The vulnerability of the cross-platform BitTorrent client qBittorrent relates to the use of default credentials when the user’s web interface is enabled. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2024-23574 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An issue was discovered in the default configurations, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS...

PT-2024-23561 · Unknown · Ros2 Iron Irwini

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: An issue was discovered in the default configurations of ROS2 Iron Irwini, allowing unauthenticated attackers to authenticate using default credentials. Recommendations: For ROS2 Iron Irwini version 2,...

PT-2024-23551 · Ros · Ros

Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials, posing a serious threat to the...

PT-2024-23602 · Ros · Ros

Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Kinetic Kame version 1 Description: An issue was discovered in the default configurations of ROS, allowing unauthenticated attackers to gain access using default credentials. Recommendations: For ROS Robot Operating...

CVE-2023-31634

In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. After accessing the IP address for the TeslaMate instance, an attacker can switch the port to 3000 to enter Grafana for remote operations. At that time, the default username and...