Lucene search
+L

8311 matches found

CNVD
CNVD
added 2021/02/24 12:00 a.m.6 views

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18380)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

9.8CVSS6.8AI score0.19844EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/24 12:00 a.m.16 views

Fiber Trust Management Issues Vulnerabilities

Fiber is an open source web framework written in the Go language . A trust management issue vulnerability exists in FiberHome HG6245D, which can be exploited by attackers to attack affected components using default passwords or hard-coded passwords and hard-coded certificates...

9.8CVSS6.8AI score0.158EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/24 12:00 a.m.16 views

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18381)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

9.8CVSS6.8AI score0.23633EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/02/24 12:00 a.m.14 views

Helpcom 信任管理问题漏洞

Helpcom is an application from the Korean company Helpcom. It provides remote control services. A security vulnerability exists in versions prior to Helpcom v10.0 that stems from storing hard-coded encryption keys. No detailed vulnerability details are provided at this time...

8.8CVSS7.3AI score0.01027EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/02/24 12:00 a.m.17 views

FiberHome AN5506-04-FA Trust Management Issues Vulnerability

FiberHome AN5506-04-FA is a router from China Fiberhome.Fiber is an open source web framework written in Go. A trust management issue vulnerability exists in FiberHome AN5506-04-FA, which can be exploited by an attacker to attack affected components using default passwords or hard-coded passwords...

9.8CVSS6.8AI score0.19844EPSS
SaveExploits1References1
ICS
ICS
added 2021/02/23 12:00 a.m.66 views

Advantech BB-ESWGP506-2SFP-T

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: BB-ESWGP506-2SFP-T Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain unauthorized...

10CVSS10AI score0.03612EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/02/23 12:00 a.m.13 views

Advantech BB-ESWGP506-2SFP-T 信任管理问题漏洞

The Advantech BB-ESWGP506-2SFP-T is an application from CHAAdvantech that provides an intelligent electric bus management system. A hard-coded vulnerability in the Advantech BB-ESWGP506-2SFP-T allows remote attackers to exploit the vulnerability to submit a special request, gain unauthorized acce...

10CVSS7.3AI score0.03612EPSS
SaveExploits0References5
CNVD
CNVD
added 2021/02/20 12:00 a.m.9 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11333)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded telecomadmin/nE7jA%5m credentials against an ISP. No detailed vulnerability details are available at this tim...

9.8CVSS6.8AI score0.23633EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.10 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11339)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded admin/G0R2U1P2ag credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.2049EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.13 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11335)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded gestiontelebucaramanga/t3l3buc4r4m4ng42013 credentials against an ISP. No detailed vulnerability details are...

9.8CVSS6.8AI score0.2049EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.14 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11328)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/user1234 credentials against an ISP. No details of the vulnerability are provided at this time...

9.8CVSS6.8AI score0.15987EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.11 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11329)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded fi!b@er$h%o^mesuperadmin/sfuh+g|u credentials against an ISP. No details of the vulnerability are provided at...

9.8CVSS6.8AI score0.21943EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.44 views

FiberHome HG6245D Hardcoded GEPON Password Vulnerability

The HG6245D is an FTTH ONT router from FiberHome. The FiberHome HG6245D is vulnerable to a hard-coded GEPON password vulnerability. The vulnerability stems from a hardcoded GEPON password defined in /etc/init.d/system-config.sh. No detailed vulnerability details are provided at this time...

9.8CVSS6.8AI score0.19844EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.10 views

IBM Security Verify Information Queue Hardcoded Credentials Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A hard-coded credentials vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit the...

7.5CVSS6.5AI score0.00886EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/20 12:00 a.m.11 views

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11334)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded adminpldt/z6dUABtl270qRxt7a2uGTiw credentials against an ISP. No detailed vulnerability details are provided a...

9.8CVSS6.8AI score0.23633EPSS
SaveExploits1References1
Schneier on Security
Schneier on Security
added 2021/02/19 12:00 p.m.55 views

Router Security

This report is six months old, and I dont know anything about the organization that produced it, but it has some alarming data about router security. Conclusion: Our analysis showed that Linux is the most used OS running on more than 90% of the devices. However, many routers are powered by very o...

0.1AI score
SaveExploits0
OSV
OSV
added 2021/02/18 12:15 a.m.8 views

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

8.8CVSS7.3AI score0.01165EPSS
SaveExploits1References4
NVD
NVD
added 2021/02/18 12:15 a.m.37 views

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

8.8CVSS0.01165EPSS
SaveExploits1References4
Prion
Prion
added 2021/02/18 12:15 a.m.17 views

Hardcoded credentials

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

5.8CVSS8.7AI score0.01165EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2021/02/17 11:11 p.m.104 views

CVE-2020-9306

CVE-2020-9306 affects Digi ConnectPort X2e devices (SolarCity/Tesla branding) with hardcoded credentials stored in a .pyc-compiled file used at boot. FireEye analysis shows password_manager.pyc in /WEB/python/ contains five plaintext credentials for the python system user, enabling web and SSH ac...

8.8CVSS8.7AI score0.01165EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder