CVE-2023-32227 Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...

CVE-2023-32227

The CVE-2023-32227 entry concerns Synel SYnergy Fingerprint Terminals with CWE-798 (Use of Hard-coded Credentials). Connected sources confirm a vulnerability in the Synel SYnergy line where credentials are hard-coded, enabling high-impact exposure (CVE metrics show CVSS v3.1 base score 9.8, netwo...

PT-2023-23671 · Synel · Synel Synergy Fingerprint Terminals

Name of the Vulnerable Software and Affected Versions: Synel SYnergy Fingerprint Terminals affected versions not specified Description: The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affect...

Synel Industries SYnergy Fingerprint Terminals 信任管理问题漏洞

Synel Industries SYnergy Fingerprint Terminals are a series of fingerprint recognition terminals from Synel Industries. These terminals are designed to provide an efficient employee time and attendance and access control solution that utilizes fingerprint recognition technology for fast and...

JBL soundbar multibeam 信任管理问题漏洞

JBL soundbar multibeam is a bar speaker from JBL. A security vulnerability exists in JBL soundbar multibeam version 5.1 that stems from the use of hard-coded credentials...

PT-2023-25833 · Jbl · Jbl Soundbar Multibeam 5.1

Name of the Vulnerable Software and Affected Versions: JBL soundbar multibeam 5.1 affected versions not specified Description: The issue concerns the use of hard-coded credentials, which is a security risk. There is no information provided about the estimated number of potentially affected device...

PT-2023-5281 · Unknown · Juplink Rx4-1500

Name of the Vulnerable Software and Affected Versions: Juplink RX4-1500 versions V1.0.2 through V1.0.5 Description: The issue is related to the use of hard-coded credentials in the Juplink RX4-1500 WI-FI router's software. This allows unauthenticated attackers to log in to the web interface or...

Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials

Overview Real-time Video Transmission Gear "IP series" provided by Fujitsu Limited uses a hard-coded credentials CWE-798 . The product's credentials for factory testing may be obtained by reverse engineering and others. Fujitsu Limited reported this vulnerability to JPCERT/CC to notify users of i...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

CVE-2023-38433

CVE-2023-38433 affects Fujitsu Real-time Video Transmission Gear IP series. The vulnerability arises from hard-coded credentials (CWE-798) that could allow a remote, unauthenticated attacker to log in and initialize or reboot devices, terminating video transmission. Affected firmware versions inc...

CVE-2023-38433

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions...

JVN#95727578: Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials

Real-time Video Transmission Gear "IP series" provided by Fujitsu Limited uses a hard-coded credentials CWE-798 . The product's credentials for factory testing may be obtained by reverse engineering and others. Impact An attacker who log in to the web interface using the obtained credentials may...

Fujitsu Real-time Video Transmission Gear IP series 信任管理问题漏洞

The Fujitsu Real-time Video Transmission Gear IP series is a real-time video transmission device from Fujitsu, Japan. A security vulnerability exists in the Fujitsu Real-time Video Transmission Gear IP series, which stems from a hard-coded credentials vulnerability. An attacker could use this...

PT-2023-5954 · Fujitsu · Ip-900D +10

Name of the Vulnerable Software and Affected Versions: Fujitsu Real-time Video Transmission Gear "IP series" versions V01L001 to V02L061 Fujitsu IP-HE950E firmware versions V01L001 to V01L053 Fujitsu IP-HE950D firmware versions V01L001 to V01L053 Fujitsu IP-HE900E firmware versions V01L001 to...

Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, allowing unauthorized read access to these mod-inventory-storage records: instance...

GHSA-VF78-3Q9F-92G3 Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

Hard-coded System User Credentials in Folio Data Export Spring module

Impact The module creates a system user that is used to perform internal module-to-module operations. Credentials for this user are hard-coded in the source code. This makes it trivial to authenticate as this user, resulting in unauthorized access to potentially dangerous APIs, allowing to view a...

PT-2023-32947 · Unknown · Mod-Inventory-Storage +1

Name of the Vulnerable Software and Affected Versions: mod-remote-storage versions under 1.7.2 mod-remote-storage versions 2.0.0 through 2.0.3 Description: The issue concerns hard-coded credentials in the mod-remote-storage module, allowing unauthorized users to gain read access to...