PT-2025-48474

Name of the Vulnerable Software and Affected Versions Socomec DIRIS Digiware M-70 version 1.6.9 Description A denial of service condition can occur in the Modbus RTU over TCP functionality. Sending a crafted network packet can cause a denial of service and potentially weaken device credentials,...

CVE-2024-49572: Missing Authentication for Critical Function

A denial of service vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted network packet can lead to denial of service and weaken credentials resulting in default documented credentials being applied to the device. An attacker can send an...

Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2138 Socomec DIRIS Digiware M-70 Modbus RTU over TCP factory reset denial of service vulnerability December 1, 2025 CVE Number CVE-2025-20085 SUMMARY A denial of service vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware...

The vulnerability of the Acropolis scalable video and data management platform, related to the use of default credentials, allows a hacker to gain access to an administrator-authorized account.

The vulnerability of the Acropolis scalable video and data management platform relates to the use of default credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the administrator-authorized account...

CVE-2025-12592

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

EUVD-2025-198160

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592 Use of default login credentials in Legacy Vivotek Devices

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592 Use of default login credentials in Legacy Vivotek Devices

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592

Consolidated data confirms CVE-2025-12592 affects legacy Vivotek device firmware, where default credentials for root and user logins grant unauthorized access. The vulnerability is characterized by high-impact metrics (confidentiality, integrity, availability all High) with network-exploitability...

PT-2025-47453

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

CVE-2025-12592: Use of Default Credentials

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts...

Vivotek Camera 安全漏洞

Vivotek Camera is a webcam from China VIVOTEK Communications Vivotek. A security vulnerability exists in Vivotek Camera that stems from the firmware using default credentials to log into the root and user accounts...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

EUVD-2025-197815

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...

PT-2025-47157

Name of the Vulnerable Software and Affected Versions QaTraq version 6.9.2 Description QaTraq version 6.9.2 is shipped with default administrative account credentials enabled, allowing immediate login via the web application login page. An attacker reaching the login page can gain administrative...

CVE-2025-63747

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can ga...