CVE-2007-3047

The CVE-2007-3047 vulnerability affects the Vonage VoIP Telephone Adapter, where a default admin username/password of user/user enables remote administrative access. According to the documented metrics, the issue has a CVSS v2 base score of 10.0 (HIGH) with network access, no authentication, and ...

SNMPc Management Server Default Credentials

The SNMPc Management Server installation on the remote host uses a default username / password combination to control access to its administrative console. Knowing these, an attacker can gain control of the affected application. C Tenable Network Security, Inc. include"compat.inc"; if description...

Default credentials

Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which allows remote attackers to gain administrative access via unspecified requests with ipmitool...

Default credentials

lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local users to obtain this password by listing the process and its arguments, related to lib/backup-methods.sh...

Default credentials

Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore point images are configured, encrypt network share credentials with a key formed by a hash of the username, which allows local users to obtain the...

Default credentials

Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...

Default credentials

Cisco Network Services CNS NetFlow Collection Engine NFC before 6.0 has an nfcuser account with the default password nfcuser, which allows remote attackers to modify the product configuration and, when installed on Linux, obtain login access to the host operating system...

Symantec Mail Security for SMTP Admin Center Default Credentials

Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...

Default credentials

Michael Still gtalkbot before 1.2 places username and password arguments on the command line, which allows local users to obtain sensitive information by listing the process...

Default credentials

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log file, or by conducting a different, unspecified local attack...

Default credentials

BEA WebLogic 7.0 through 7.0 SP6, 8.1 through 8.1 SP4, and 9.0 initial release does not encrypt passwords stored in the JDBCDataSourceFactory MBean Properties, which allows local administrative users to read the cleartext password...

Modicon Quantum Telnet Server Default Credentials

Binary data scadamodicontelnet.nbin...

Schneider Electric FTP Server Default Credentials

Binary data scadamodicondefaultftp.nbin...

Modicon PLC CPU Type Default Credentials (SCADA)

Binary data 3855.prm...

Modicon Quantum HTTP Server Default Credentials

Binary data scadamodicondefaultweb.nbin...

CVE-2000-1242

CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...

CVE-2000-1242

The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...

HSQLDB Server Default Credentials

The installation of HSQLDB on the remote host has the default 'sa' account enabled without a password. An attacker may use this flaw to execute commands against the remote host, as well as read any data it might contain. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2006-5288

Cisco 2700 Series Wireless Location Appliances before 2.1.34.0 have a default administrator username "root" and password "password," which allows remote attackers to obtain administrative privileges, aka Bug ID CSCsb92893...

CVE-2006-5288

The CVE-2006-5288 issue involves Cisco 2700 Series Wireless Location Appliances with a default administrator credential set: username root and password password (pre-2.1.34.0). Remote attackers could obtain administrative privileges due to this default credential configuration (Bug ID CSCsb92893)...