2481 matches found
CVE-2014-3692
The customization template in Red Hat CloudForms 3.1 Management Engine CFME 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges...
Ceragon FiberAir IP-10 Microwave Bridge contains a default root password
Overview Ceragon FiberAir IP-10 Microwave Bridge contains a default root password. Description CWE-255:Credentials Management Ceragon FiberAir IP-10 Microwave Bridges contain a default root password. The root account can be accessed through ssh, telnet, command line interface, or via HTTP. The...
OpenNMS Authenticated XXE
OpenNMS is vulnerable to XML External Entity Injection in the Real-Time Console interface. Although this attack requires authentication, there are several factors that increase the severity of this vulnerability. 1. OpenNMS runs with root privileges, taken from the OpenNMS FAQ: "The difficulty wi...
ARRIS Touchstone TG862G/CT Telephony Gateway Security Mechanism Bypass Vulnerability
The ARRIS Touchstone TG862G/CT Telephony Gateway is an all-in-one Modem modem router from the Arris Group of Companies. A security mechanism bypass vulnerability exists in ARRIS Touchstone TG862G/CT Telephony Gateway 7.6.59S.CT that allows remote attackers to obtain the default password for acces...
Default Password (centreon) for 'root' Account
The account 'root' on the remote host has the default password 'centreon'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Centreon Enterprise Server is known to use these credentials to provide complete, administrative access to the virtual...
Default Password (abc123) for 'admin' Account
The account 'admin' on the remote host has the default password 'abc123'. An attacker can leverage this issue to gain full access to the affected system. Note that Junos Space is known to use these credentials by default. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "admin";...
CIK Telecom VoIP router SVG6000RW - Privilege Escalation / Command Execution
Exploit for php platform in category web applications Exploit Title: CIK Telecom VoIP router SVG6000RW Privilege Escalation and Command Execution Date: 2014/12/10 Exploit Author: Chako Vendor Homepage: https://www.ciktel.com/ Description: CIK Telecom VoIP router SVG6000RW has a Privilege Escalati...
CVE-2014-9406
ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...
Default credentials
ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...
CVE-2014-9406
CVE-2014-9406 affects the ARRIS Touchstone TG862G/CT Telephony Gateway (firmware 7.6.59S.CT and earlier). The underlying issue is a default admin password of 'password' , which allows remote attackers to gain access via a request to home_loggedout.php. The entry documents a network-accessible, hi...
CVE-2014-9406
ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...
CIK Telecom VoIP Router SVG6000RW - Privilege Escalation / Command Execution
Exploit Title: CIK Telecom VoIP router SVG6000RW Privilege Escalation and Command Execution Date: 2014/12/10 Exploit Author: Chako Vendor Homepage: https://www.ciktel.com/ Description: CIK Telecom VoIP router SVG6000RW has a Privilege Escalation vulnerabilitie and can lead to Command Execution...
CIK Telecom SVG6000RW Default Account / Command Execution
Exploit Title: CIK Telecom VoIP router SVG6000RW Privilege Escalation and Command Execution Date: 2014/12/10 Exploit Author: Chako Vendor Homepage: https://www.ciktel.com/ Description: CIK Telecom VoIP router SVG6000RW has a Privilege Escalation vulnerabilitie and can lead to Command Execution...
8 0% Vientiane network management there is a default database password can penetrate the entire cafe-vulnerability warning-the black bar safety net
Internet cafe database there is a default sa password can modify the data can be remotely executed command, and may penetrate the entire cafe It seems like a very old vulnerability, but now most of the Internet cafe or can use Detailed description: Vientiane database default password Account: sa...
CVE-2014-9183
ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges...
Default credentials
ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges...
CVE-2014-9183
ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges...
CVE-2014-9183
CVE-2014-9183 concerns ZTE ZXDSL 831CII devices with a default admin:admin credential that enables remote administrators access. Public sources describe a hardcoded/default credential issue (admin/admin) and related UI/CSRF/XSS risks impacting the device. NVD lists a CVSS v2 base score 10.0 (HIGH...
Default Password (TANDBERG) for 'root' Account
The account 'root' on the remote host has the password 'TANDBERG'. An attacker may leverage this issue to gain administrative access to the affected system. Note that Cisco TelePresence Conductor virtual appliances are known to use these credentials to provide complete, administrative access to t...
CVE-2014-8656
The Compal Broadband Networks CBN CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of 1 admin for the admin account and 2 compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information...