CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

CVE-2024-29170

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

CVE-2024-29170: Use of Hard-coded Credentials

Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...

Dell PowerScale OneFS Trust Management Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...

PT-2024-22778 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.8.0.x Description: The issue concerns a use of hard-coded credentials, which could be exploited by an adjacent network unauthenticated attacker. This could lead to information disclosure of netwo...

Multiple vulnerabilities in Sharp and Toshiba Tec MFPs

Overview Sharp and Toshiba Tec MFPs multifunction printers contain multiple vulnerabilities listed below. Stack-based Buffer Overflow CWE-121 - CVE-2024-28038 Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2024-28955 Cleartext Storage of Sensitive Information CWE-312 -...

TOTOLINK CP300+ security vulnerabilities

TOTOLINK is a mid-to-high-end wireless routing brand in the Asia Pacific region. A hard-coded password vulnerability exists in the TOTOLINK CP300, which can be exploited by an attacker to log in as root...

LenelS2 NetBox

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : LenelS2 Equipment : NetBox Vulnerabilities : Use of Hard-coded Password, OS Command Injection, Argument Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

Westermo EDW-100

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Westermo Equipment : EDW-100 Vulnerabilities : Use of Hard-coded Password, Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of these vulnerabilities could...

TOTOLINK CP900L web_cste/cgi-bin/product.ini Hardcoded Password Vulnerability

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900L suffers from a hard-coded password vulnerability that originates from the inclusion of a hard-coded password in /webcste/cgi-bin/product.ini, which can be exploited by an attacker to log in as roo...

TOTOLINK CP900L /etc/shadow.sample hardcoded password vulnerability

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900L suffers from a hard-coded password vulnerability that originates from the inclusion of a hard-coded password in /etc/shadow.sample, which can be exploited by an attacker to log in as root...

NetBox Security Vulnerability

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in LenelS2 NetBox 5.6.1 and earlier versions, which stems from the use of hard-coded passwords, allowing an attacker t...

CVE-2024-5514: Use of Hard-coded Credentials

MinMax CMS from MinMax Digital Technology contains a hidden administrator account with a fixed password that cannot be removed or disabled from the management interface. Remote attackers who obtain this account can bypass IP access control restrictions and log in to the backend system without bei...

Delinea Secret Server Auth Bypass

The vulnerability of the application programming interface of the Delinea Secret Server management software relates to the use of cryptographic algorithms with a hard-programmed key for encryption. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures...

Fabric OS versions prior to v9.0 have default community strings (CVE-2024-5460)

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

CVE-2024-33849

ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key...

CVE-2024-33849: Use of Hard-coded Cryptographic Key

ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key...

Multiple Anpviz products have security vulnerabilities

Anpviz IPC is a series of network cameras from Anpviz. A security vulnerability exists in multiple Anpviz products that stems from storing hard-coded encryption keys in the device firmware, resulting in a security hole. Affected products and versions: Anpviz IPC-D250, IPC-D260, IPC-B850 IPC-D850,...

CI solution CI-Out-of-Office Manager security vulnerability

CI solution CI-Out-of-Office Manager is a tool from CI solution for managing employee leave and out-of-office status. The solution is designed to streamline and automate the leave request, approval, and recording process to improve management efficiency in your organization. A security...