CVE-2024-29844

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the us...

CVE-2024-31069

IO-1020 Micro ELD web server uses a default password for authentication...

CVE-2024-30210

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-30210 IOSIX IO-1020 Micro ELD Use of Default Credentials

IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device...

CVE-2024-30210

IOSiX IO-1020 Micro ELD is affected by CVE-2024-30210 due to default WIFI credentials in versions prior to 360. The vulnerability allows an adjacent attacker to connect to the device over wireless, with an attacker-adjacent access vector and low attack complexity, potentially yielding high confid...

IOSIX IO-1020 Micro ELD 安全漏洞

The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in versions prior to the IOSIX IO-1020 Micro ELD 360 that stems from a web server using a default password for authentication...

IO-1020 Micro ELD 安全漏洞

The IOSiX IO-1020 Micro ELD is an electronic logging device from IOSiX USA. A security vulnerability exists in previous versions of the IO-1020 Micro ELD 360 that stems from the use of a default WIFI password that could allow a neighboring attacker to connect to the device...

PT-2024-23747 · Unknown · Io-1020 Micro Eld

Name of the Vulnerable Software and Affected Versions: IO-1020 Micro ELD version affected versions not specified Description: The issue concerns the use of a default password for authentication in the IO-1020 Micro ELD web server. Recommendations: At the moment, there is no information about a...

IOSIX IO-1020 Micro ELD

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.4 ATTENTION : Exploitable from adjacent network/Low attack complexity Vendor : IOSiX Equipment : IO-1020 Micro ELD Vulnerabilities : Use of Default Credentials, Download of Code Without Integrity Check 2. RISK EVALUATION Successful exploitation of these...

CVE-2024-29666

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...

PT-2024-22955 · Cmsv6 · Cmsv6

Name of the Vulnerable Software and Affected Versions: Vehicle Monitoring platform system CMSV6 versions 7.31.0.2 through 7.32.0.3 Description: The issue allows a remote attacker to escalate privileges via the default password component. This is an Insecure Permissions vulnerability...

CVE-2024-29666

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...

CVE-2024-29666

CMSV6 Vehicle Monitoring platform (CMSV6) versions 7.31.0.2 through 7.32.0.3 contain an Insecure Permissions flaw that allows a remote attacker to escalate privileges via the default password component. Root cause is improper privilege management related to the default password mechanism. Red Hat...

CVE-2024-29666

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component...

CMSV6 In-Vehicle Monitoring System 安全漏洞

CMSV6 In-Vehicle Monitoring System IVMS is a video monitoring system by YONGFU LI's personal developer. It is used for vehicle tracking and monitoring its performance and driver behavior. A security vulnerability exists in CMSV6 In-Vehicle Monitoring System versions v.7.31.0.2 through v.7.32.0.3,...

Weak Cryptographic Hash

Liferay Portal is vulnerable to Weak Cryptographic Hash. The vulnerability exists due to the default password hashing algorithm PBKDF2-HMAC-SHA1 having a low work factor in the Liferay Portal. It allows attackers to crack password hashes quickly, potentially compromising user accounts and gaining...

PT-2024-21115 · Arris · Arris Sbg6580

Name of the Vulnerable Software and Affected Versions: Arris SBG6580 affected versions not specified Description: The issue concerns Arris SBG6580 devices, which have predictable default WPA2 security passwords. This predictability could lead to unauthorized remote access. The passwords are...

ARRIS SURFboard SBG6580 Security Vulnerability

The ARRIS SURFboard SBG6580 is a modem with wireless capabilities from ARRIS. A security vulnerability exists in the ARRIS SURFboard SBG6580 that stems from the default WPA2 security password being easily predictable...

BIT-FLUENTD-2020-21514

An issue was discovered in Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password...

Unitronics VisiLogic < 9.9.00 Default Password

The version of Unitronics VisiLogic installed on the remote host is prior to 9.9.00. It is, therefore, affected by a vulnerability. - Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with networ...