CVE-2018-19275

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system...

Default credentials

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system...

CVE-2018-19275

Summary (CVE-2018-19275): The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers exposes a default password that could allow remote attackers to gain unauthorized access and execute arbitrary scripts, potentially impacting confidentiality, integrity, and avail...

CVE-2018-19275

The BluStar component in Mitel InAttend before 2.5 SP3 and CMG before 8.4 SP3 Suite Servers has a default password, which could allow remote attackers to gain unauthorized access and execute arbitrary scripts with potential impacts to the confidentiality, integrity and availability of the system...

CVE-2019-10011

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS aka Internet Campus Solution before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234...

Arbitrary Code Execution

The SAP BusinessObjects product which deploys Axis2 is vulnerable to arbitrary code execution. It is possible because it uses a default password for the administrator account, allowing anyone with access to the Axis2 port to gain full access to the machine and execute an arbitrary code. Note:...

Insecure Authentication

Apache Tomcat uses an insecure authentication for its administrative user. The application sets a blank password as the default password for the administrative user during the installation process. This allows an attacker to authenticate as an administrator and gain privileged access to the...

Cisco Patches Critical ‘Default Password’ Bug

Cisco Systems is warning customers that a discovery tool for network devices can be accessed by a remote and unauthenticated attacker. The flaw could allow an adversary to log into the system and collect sensitive data tied to host operating systems and hardware. The disclosure is part of a Cisco...

Cisco Common Service Platform Collector (CSPC) Privilege Permission and Access Control Vulnerability

The Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling Cisco devices for basic inventory and configuration data. A privilege-granting and access...

CVE-2019-1723

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

Default credentials

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

CVE-2019-1723

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

CVE-2019-1723 Cisco Common Services Platform Collector Static Credential Vulnerability

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

CVE-2019-1723

The CVE-2019-1723 issue affects Cisco CSPC (Common Services Platform Collector). The root cause is a default, static password on a built-in user account, permitting an unauthenticated, remote attacker to log in remotely. Vulnerable software versions include CSPC 2.7.x (specifically 2.7.2 through ...

CVE-2019-1723 Cisco Common Services Platform Collector Static Credential Vulnerability

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

Cisco Common Services Platform Collector Static Credential Vulnerability

A vulnerability in the Cisco Common Services Platform Collector CSPC could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the...

Default Password ('!2345Asdfg') for 'root' Account

The account 'root' on the remote host has the password '!2345Asdfg'. An attacker may leverage this issue to gain access, likely as an administrator, to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "!2345Asdfg";...

The vulnerability of the embedded software in the CNC11 TITANIUM mini system allows a hacker to gain full access to the system.

The vulnerability of the embedded software of the CNC11 TITANIUM mini system is related to the use of a default weak password for the root account, information about which is not available in the documentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain ful...

Cisco Video Surveillance Manager Appliance Default Password Vulnerability(cisco-sa-20180921-vsm)

According to its self-reported version, the version of Cisco Video Surveillance Manager installed on the remote host is affected by a default password vulnerability. An attacker could exploit this vulnerability to login as the 'root' user and execute arbitrary commands. C Tenable Network Security...

CVE-2019-1688 Cisco Network Assurance Engine CLI Access with Default Password Vulnerability

A vulnerability in the management web interface of Cisco Network Assurance Engine NAE could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service DoS condition on the server. The vulnerability is due to a fault in the password management system of NAE. ...