CVE-2007-3047

The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access...

Default credentials

The Vonage VoIP Telephone Adapter has a default administrator username "user" and password "user," which allows remote attackers to obtain administrative access...

CVE-2007-3047

The CVE-2007-3047 vulnerability affects the Vonage VoIP Telephone Adapter, where a default admin username/password of user/user enables remote administrative access. According to the documented metrics, the issue has a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and ...

SNMPc Management Server Default Credentials

The SNMPc Management Server installation on the remote host uses a default username / password combination to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description...

Default credentials

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

Default credentials

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

Default credentials

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the...

Default credentials

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

Default credentials

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

Symantec Mail Security for SMTP Admin Center Default Credentials

Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...

Default credentials

Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process...

Default credentials

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

Default credentials

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password...

Modicon Quantum HTTP Server Default Credentials

Binary data scadamodicondefaultweb.nbin...

Schneider Electric FTP Server Default Credentials

Binary data scadamodicondefaultftp.nbin...

Modicon Quantum Telnet Server Default Credentials

Binary data scadamodicontelnet.nbin...

Modicon PLC CPU Type Default Credentials (SCADA)

Binary data 3855.prm...

CVE-2000-1242

The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...

CVE-2000-1242

CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...

HSQLDB Server Default Credentials

The installation of HSQLDB on the remote host has the default 'sa' account enabled without a password. An attacker may use this flaw to execute commands against the remote host, as well as read any data it might contain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...