CVE-2009-4188

CVE-2009-4188 concerns HP Operations Dashboard which uses a default j2deployer password for the j2deployer account. The issue allows remote attackers to execute arbitrary code by initiating a session with the manager role to perform unrestricted file-upload attacks against the Tomcat manager serv...

CVE-2009-3548

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges...

Default credentials

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges...

CVE-2009-3548

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges...

CVE-2009-3548

The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges...

[SECURITY] CVE-2009-3548 Apache Tomcat Windows Installer insecure default administrative password

CVE-2009-3548: Apache Tomcat Windows Installer insecure default administrative password Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.0 to 5.5.28 Tomcat 6.0.0 to 6.0.20 The unsupported Tomcat 3.x, 4.0.x, 4.1.x and 5.0.x versions may be also affected...

Default Password (alpine) for 'mobile' Account

The account 'mobile' on the remote host has the password 'alpine'. An attacker may leverage this issue to gain access to the affected system. Note that iPhones are known to use these credentials by default and allow access via SSH when jailbroken. %NASLMINLEVEL 70300 C Tenable Network Security,...

Scan of Internet Uncovers Thousands of Vulnerable Embedded Devices

Researchers scanning the internet for vulnerable embedded devices have found nearly 21,000 routers, webcams and VoIP products open to remote attack, due to the fact that their administrative interfaces are publicly viewable from anywhere on the internet and their owners have failed to change the...

Default credentials

Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6993

Siemens Gigaset WLAN Camera 1.27 has an insecure default password, which allows remote attackers to conduct unauthorized activities. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

NSClient Default Password

The remote host is running an instance of NSClient, an addon for Nagios used to monitor Windows hosts, configured using a default password. Anyone can connect to it and retrieve sensitive information, such as process and service states, memory usage, etc. C Tenable Network Security, Inc...

CVE-2009-2317

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

CVE-2009-2317

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

CVE-2009-2317

The CVE-2009-2317 entry pertains to the Axesstel MV 410R router that ships with a default administrator password and does not require changing it. This configuration allows remote attackers to obtain access. The available connected documents confirm the issue exists in the MV 410R as described, b...

Axesstel MV 410R Bypass / XSS

Multiple Flaws in Axesstel MV 410R by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Axesstel MV 410R is a device offered by the two leading polish telecom operators Orange and Polish Telecom to provide broadband Internet in CDMA technology and it's already widely in use...

CVE-2009-2271

The Huawei D100 has 1 a certain default administrator password for the web interface, and does not force a password change; and has 2 a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access...

Default credentials

The Huawei D100 has 1 a certain default administrator password for the web interface, and does not force a password change; and has 2 a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access...

CVE-2009-2271

The CVE-2009-2271 entry concerns the Huawei D100, where (1) a default administrator password for the web interface is not forced to be changed, and (2) the admin account in the Telnet interface uses the default password “admin.” This combination enables remote attackers to obtain access. The exis...

CVE-2009-2271

The Huawei D100 has 1 a certain default administrator password for the web interface, and does not force a password change; and has 2 a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access...

Multiple Flaws in Huawei D100

Multiple Flaws in Huawei D100 by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Huawei D100 is a device offered by the polish telecom operator - Play, to provide broadband Internet in CDMA technology and it's already widely in use. Overview: Huawei D100 firmware and its defau...