CVE-2020-15323: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account default credentials...

PT-2020-13013

Name of the Vulnerable Software and Affected Versions Baxter Spectrum WBM versions v17, v20D29, v20D30, v20D31, and v22D24 Baxter Spectrum v8.x model 35700BAX2 Description The issue concerns the Baxter Spectrum WBM and Baxter Spectrum v8.x, which enable an FTP service with hard-coded credentials...

CVE-2020-15318: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account within the /opt/mysql chroot directory tree...

CVE-2020-15313: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...

CVE-2020-15317: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account within the /opt/axess chroot directory tree...

PT-2020-12984

Name of the Vulnerable Software and Affected Versions Baxter ExactaMix EM 2400 versions 1.10 through 1.14 Baxter ExactaMix EM 1200 versions 1.1 through 1.5 Description The issue concerns hard-coded administrative account credentials for the ExactaMix operating system. This could allow an attacker...

CVE-2018-6446: Use of Hard-coded Credentials

A vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated, remote attacker to log in to the JBoss Administration interface of an affected system using an undocumented user credentials and install additional JEE applications...

CVE-2020-15324: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config/xmppconfig.py file that stores hardcoded credentials...

CVE-2020-15320: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account...

PT-2020-13011

Name of the Vulnerable Software and Affected Versions Baxter Spectrum WBM versions v17, v20D29, v20D30, v20D31, and v22D24 Baxter Spectrum v8.x model 35700BAX2 Description The Baxter Spectrum WBM, when used with a Baxter Spectrum v8.x, operates a Telnet service on Port 1023 with hard-coded...

CVE-2020-15321: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account...

CVE-2020-15327: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication...

CVE-2020-15326: Use of Hard-coded Credentials

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem...

CVE-2020-10276: Use of Hard-coded Credentials

The password for the safety PLC is the default and thus easy to find in manuals, etc.. This allows a manipulated program to be uploaded to the safety PLC, effectively disabling the emergency stop in case an object is too close to the robot. Navigation and any other components dependent on the las...

CVE-2020-10269: Use of Hard-coded Credentials

One of the wireless interfaces within MiR100, MiR200 and possibly according to the vendor other MiR fleet vehicles comes pre-configured in WiFi Master Access Point mode. Credentials to such wireless Access Point default to well known and widely spread SSID MiRRXXXX and passwords omitted. This...

CVE-2020-10270: Use of Hard-coded Credentials

Out of the wired and wireless interfaces within MiR100, MiR200 and other vehicles from the MiR fleet, it's possible to access the Control Dashboard on a hardcoded IP address. Credentials to such wireless interface default to well known and widely spread users omitted and passwords omitted. This...

Baxter ExactaMix EM2400 and ExactaMix EM1200 Trust Management Issues Vulnerability (CNVD-2021-21074)

The Baxter ExactaMix EM2400 and ExactaMix EM1200 are both automated drug mixing systems from Baxter. A trust management issue vulnerability exists in the Baxter ExactaMix EM2400 and ExactaMix EM1200, which stems from the ExactaMix application's use of hard-coded administrative account credentials...

Baxter ExactaMix EM2400 and ExactaMix EM1200 Trust Management Issues Vulnerability

The Baxter ExactaMix EM2400 and ExactaMix EM1200 are both automated drug mixing systems from Baxter. A trust management issue vulnerability exists in the Baxter ExactaMix EM2400 and ExactaMix EM1200, which stems from hard-coded credentials used in the admin account of the ExactaMix operating...

Baxter Spectrum WBM Trust Management Issues Vulnerability

The Baxter WBM and Baxter Spectrum are both products of Baxter, Inc.The Baxter WBM is a wireless battery module for use with Baxter products.The Baxter Spectrum is an infusion pump. The WBM used in the Baxter Spectrum has a security vulnerability that can be exploited by an attacker to run Telnet...

Schneider Electric Unity Loader and OS Loader Software Trust Management Issues Vulnerability

Schneider Electric Unity Loader and OS Loader Software are both products of Schneider Electric, France.Unity Loader is a data exchange utility program.OS Loader Software is a system loading utility program. A trust management issue vulnerability exists in Schneider Electric Unity Loader and OS...