Zebra PrintServer Default Credentials (Telnet)

The remote Zebra PrintServer has a default password set. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Cisco Mobility Services Engine (MSE) Multiple Vulnerabilities (cisco-sa-20151104-privmse, cisco-sa-20151104-mse-cred)

Cisco Mobility Services Engine MSE is prone multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the microprogramming software in Janitza UMG 508, 509, 511, 604, 605 power supply monitoring systems allows a intruder to read or write files.

The vulnerability of the FTP service provided by the microprogramming software for Janitza UMG 508, 509, 511, 604, and 605 control systems is related to the use of a default password. Exploiting this vulnerability allows an attacker to remotely read or write files by establishing a TCP session on...

Huawei HG630a / HG630a-50 Default SSH Admin Password

Exploit Title: Huawei HG630a and HG630a-50 Default SSH Admin Password on Adsl Modems Date: 10.11.2015 Exploit Author: Murat Sahin Vendor Homepage: Huawei Version: HG630a and HG630a-50 Tested on: linux,windows Adsl modems force you to change admin web interface password. Even though you can change...

Huawei HG630a and HG630a-50 - Default SSH Admin Password on ADSL Modems Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Huawei HG630a and HG630a-50 Default SSH Admin Password on Adsl Modems Date: 10.11.2015 Exploit Author: Murat Sahin Vendor Homepage: Huawei Version: HG630a and HG630a-50 Tested on: linux,windows Adsl modems force you to chang...

Huawei HG630a HG630a-50 - Default SSH Admin Password on ADSL Modems

Huawei HG630a HG630a-50 - Default SSH Admin Password on ADSL Modems Exploit Title: Huawei HG630a and HG630a-50 Default SSH Admin Password on Adsl Modems Date: 10.11.2015 Exploit Author: Murat Sahin @murtshn Vendor Homepage: Huawei Version: HG630a and HG630a-50 Tested on: linux,windows Adsl modems...

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

Default credentials

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

CVE-2015-3968

Summary of CVE-2015-3968 : The Janitza UMG power quality devices (models 508, 509, 511, 604, 605) expose an FTP interface protected by a default/password-hardcoded credential, enabling remote attackers to read or write files via TCP port 21. The root cause is weak/default credentials in the devic...

CVE-2015-3968

The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for remote attackers to read or write to files via a session on TCP port 21...

HP ArcSight SmartConnector fails to properly validate SSL and contains a hard-coded password

Overview The HP ArcSight SmartConnector fails to properly validate SSL certificates, and also contains a hard-coded password. Description CWE-295: Improper Certificate Validation - CVE-2015-2902The ArcSight SmartConnector fails to validate the certificate of the upstream Logger device it is...

OpenNMS Default Password Vulnerability

OpenNMS is the U.S. OpenNMS company's set of enterprise-class, Java/XML-based distributed network and system monitoring and management platform, the platform can display the status and configuration of various terminals and servers in the network. OpenNMS has a default password vulnerability. All...

CVE-2015-7856

OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials...

Default credentials

OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials...

CVE-2015-7856

OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials...

CVE-2015-7856

CVE-2015-7856 concerns OpenNMS and a default credential: the rtc account uses the password “rtc,” enabling remote access for an attacker who knows the credentials. The NVD entry lists a high base score (9.0+ system-generated, shown as 10.0 in this record) with network access, no authentication, a...

Supplement to ICSA-15-237-02 EasyIO-30P-SF Hard-Coded Credential Vulnerability

OVERVIEW This advisory supplement was originally posted to the US-CERT secure Portal library on August 25, 2015, and is being released to the NCCIC/ICS-CERT web site. This advisory supplement is to accompany the ICS-CERT advisory titled ICSA‑15‑237‑02 EasyIO-30PF-SF Hard-Coded Credential...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-2915

Securifi Almond devices with firmware before AL1-R201EXP10-L304-W34 and Almond-2015 devices with firmware before AL2-R088M have a default password of admin for the admin account, which allows remote attackers to obtain web-management access by leveraging the ability to authenticate from the...

CVE-2015-2915

CVE-2015-2915 affects Securifi Almond devices: firmware before AL1-R201EXP10-L304-W34 and Almond-2015 before AL2-R088M use a default admin password, enabling a local intranet attacker to gain web-management access. The vulnerability is due to default credentials that allow authentication without ...