8293 matches found
CVE-2023-36623
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges...
CVE-2023-36623
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges...
CVE-2023-34473
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34338
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473 Usage of Hard-coded Credentials
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473 Usage of Hard-coded Credentials
AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
CVE-2023-34473
AMI SPx BMC contains a vulnerability (CVE-2023-34473) where a valid user can cause the use of hard-coded credentials. Consequences may include loss of confidentiality, integrity, and availability. Exploitation details are not provided in the sources; no remediation/version fix is specified in the...
CVE-2023-34338
AMI SPx BMC contains a hard-coded cryptographic key used by a hard-coded certificate in the BMC, enabling an attacker to affect confidentiality, integrity, and availability. The CVE-2023-34338 entry cites a HIGH/CRITICAL impact with CVSSv3.1 metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and notes...
CVE-2023-34338 hard coded cryptographic key
AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-coded certificate. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...
Authentication Bypass
sphinx is vulnerable to Authentication Bypass. This vulnerability exists in the use of hard-coded credentials, which enables a local attacker to utilize the default password and bypass the login...
AMI MegaRAC 信任管理问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...
CVE-2023-36623
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges...
AMI MegaRAC 信任管理问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...
CVE-2023-36623
The root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded secrets and the MAC address. This allows a local user to calculate the root password and escalate privileges...
PT-2023-24823 · Ami · Ami Spx
Name of the Vulnerable Software and Affected Versions: AMI SPx affected versions not specified Description: The issue is related to a hard-coded cryptographic key used by a hard-coded certificate in the BMC of AMI SPx. This could lead to a loss of confidentiality, integrity, and availability if...
PT-2023-24899 · Ami · Ami Spx
Name of the Vulnerable Software and Affected Versions: AMI SPx affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI SPx, where a valid user can cause the use of hard-coded credentials. This may lead to a loss of confidentiality, integrity, and...
VulnCheck KEV: CVE-2010-1573
Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp...
Loxone Miniserver 信任管理问题漏洞
Loxone Miniserver is a server from Loxone, Inc. that automates equipment and homes in buildings and houses to provide energy management and monitoring. A security vulnerability exists in Loxone Miniserver Go Gen.2 versions prior to 14.2, which stems from the fact that root passwords are computed...
