Weasis 安全漏洞

Weasis is an open source DICOM medical image viewer, mainly used to visualize images obtained from medical imaging devices. A key disclosure vulnerability exists in Weasis version 4.5.1, which stems from having a hard-coded key for symmetric encryption of proxy credentials in...

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

CVE-2024-48007

CVE-2024-48007 affects Dell RecoverPoint for Virtual Machines, version 6.0.x. The vulnerability stems from hard-coded credentials in the software, enabling a remote, unauthenticated attacker to access secrets and, consequently, unauthorized data. Documents consistently describe the impact as enab...

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

CVE-2024-48007

Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...

PT-2024-9593 · Dell · Dell Recoverpoint For Virtual Machines

Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines version 6.0.x Description: The issue is related to the use of hard-coded credentials in the software. A remote unauthenticated attacker could exploit this by gaining access to the source code, easily...

CVE-2024-28146

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device...

CVE-2024-28146

CVE-2024-28146 affects Image Access Scan2Net software. The issue arises from hard-coded credentials used to (1) encrypt configuration files during backups, (2) decrypt firmware during updates, and (3) passwords that allow a direct connection to the device’s database server. Public records from mu...

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from Image Access, Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which stems from the application's use of multiple hard-coded credentials to encrypt configuration...

PT-2024-22296 · Image Access Gmbh · Scan2Net

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue concerns the application's use of several hard-coded credentials. These credentials are used for encrypting config files during backup and decrypting new firmware during...

COMFAST CF-WR630AX 安全漏洞

COMFAST CF-WR630AX is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-WR630AX version v2.7.0.2, which stems from the use of hard-coded passwords found in /etc/shadow...

WAVLINK WN701AE Hardcoded Vulnerability

WAVLINK WN701AE is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN701AE suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

WAVLINK WN531P3 Hardcoded Vulnerability

WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

Ubiquiti U7-Pro 安全漏洞

Ubiquiti U7-Pro is a wireless remote access point from Ubiquiti, Inc. A security vulnerability exists in the Ubiquiti U7-Pro version 7.0.35, which stems from the inclusion of a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

SICK多款产品 安全漏洞

SICK InspectorP61x and others are products of SICK, Germany.SICK InspectorP61x is an ultra-compact industrial 2D vision sensor.SICK InspectorP62x is an ultra-compact industrial 2D vision sensor.SICK TiM3xx is an opto-electronic laser scanner that scans the surrounding environment with the help of...

WAVLINK WN701AE 安全漏洞

WAVLINK WN701AE is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN701AE suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

Ubiquiti U6-LR 安全漏洞

Ubiquiti U6-LR is a wireless remote access point from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti U6-LR version 6.6.65, which stems from the inclusion of a hard-coded password vulnerability in /etc/shadow that allows an attacker to log in as root...

WAVLINK WN531P3 安全漏洞

WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

Thinkware Cloud APK 安全漏洞

Thinkware Cloud APK is a free Android app from Thinkware that allows easy access to Thinkware Car Recorder. A security vulnerability exists in Thinkware Cloud APK version v4.3.46 that stems from a hard-coded decryption key in the application, which allows an attacker to access sensitive data and...