CVE-2021-33531

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...

CVE-2021-33531 WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...

CVE-2021-33531

The CVE-2021-33531 entry describes a vulnerability in Weidmueller Industrial WLAN devices where an undisclosed/undocumented encryption password enables hard-coded credentials in the device OS, allowing an attacker with low privileges to execute custom diagnostic scripts by sending them authentica...

CVE-2021-33529 WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

CVE-2021-33529: Use of Hard-coded Credentials

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

CVE-2021-33531: Use of Hard-coded Credentials

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...

CVE-2021-33540: Use of Hard-coded Credentials

In certain devices of the Phoenix Contact AXL F BK and IL BK product families an undocumented password protected FTP access to the root directory exists...

PT-2021-20178

Name of the Vulnerable Software and Affected Versions Weidmueller Industrial WLAN devices affected versions not specified Description A vulnerability exists due to the use of hard-coded credentials in multiple iw utilities. The device operating system contains an undocumented encryption password,...

CVE-2021-33531

In Weidmueller Industrial WLAN devices in multiple versions an exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. An attacker can...

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

Hardcoded credentials

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2021-34812

CVE-2021-34812 affects Synology Calendar: a vulnerability in the PHP component where hard-coded credentials allow remote attackers to obtain sensitive information. It is exploitable on Synology Calendar versions before 2.4.0-0761. Remediation is to upgrade to 2.4.0-0761 or later. Exploitation sta...

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2021-34812: Use of Hard-coded Credentials

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2021-34812

Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors...

PT-2021-3380

Name of the Vulnerable Software and Affected Versions Synology Calendar versions prior to 2.4.0-0761 Description The issue is related to the use of hard-coded credentials in the php component of Synology Calendar, allowing remote attackers to obtain sensitive information. Recommendations For...

CVE-2021-31477

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the device. The firmware and filesystem contain...

CVE-2021-31477

This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the device. The firmware and filesystem contain...

CVE-2021-31477

CVE-2021-31477 affects GE Reason RPV311 14A03. The vulnerability arises from hard-coded default credentials stored in the device firmware/filesystem, enabling remote attackers to execute arbitrary code with the download user context without authentication. Several sources (ZDI advisory ZDI-21-616...