Lucene search
+L

331 matches found

OSV
OSV
added 2021/07/07 3:15 p.m.7 views

CVE-2021-33220

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist...

7.8CVSS5.8AI score0.00254EPSS
SaveExploits2References2
OSV
OSV
added 2021/07/06 11:15 a.m.7 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

7.5CVSS7.1AI score0.00563EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/06 11:15 a.m.5 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

7.5CVSS6.7AI score0.00563EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/07/06 10:56 a.m.6 views

CVE-2021-24005

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions before 6.3.0 may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

4CVSS5.4AI score0.00563EPSS
SaveExploits0References1
CVE
CVE
added 2021/07/06 10:56 a.m.59 views

CVE-2021-24005

FortiAuthenticator is affected by CVE-2021-24005 due to use of hard-coded cryptographic keys to encrypt configuration files and debug logs. The root cause is the presence of a hard-coded key that can allow an attacker with access to the files or CLI configuration to decrypt sensitive data. Affect...

7.5CVSS7.4AI score0.00563EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2021/06/29 12:0 a.m.10 views

Weidmueller Industrial WLAN devices trust management issue vulnerability (CNVD-2021-48133)

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. Weidmueller Industrial WLAN devices Trust Management Issue vulnerability, which stems from the use of hard-coded keys in the service agent binary, can be exploited by an attacker to decrypt captured traffic from ...

7.5CVSS6.8AI score0.00934EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/25 7:15 p.m.9 views

CVE-2021-33529

In Weidmueller Industrial WLAN devices in multiple versions the usage of hard-coded cryptographic keys within the service agent binary allows for the decryption of captured traffic across the network from or to the device...

7.5CVSS5.8AI score0.00934EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/25 12:0 a.m.7 views

Weidmueller Industrial WLAN 信任管理问题漏洞

Weidmueller Industrial WLAN devices is an industrial WIAN from Weidmueller, Germany. Weidmueller Industrial WLAN devices Trust Management Issue vulnerability, which stems from the use of hard-coded keys in the service agent binary, can be exploited by an attacker to decrypt captured traffic from ...

7.5CVSS5.6AI score0.00934EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.10 views

Fortinet FortiAuthenticator WEB UI 信任管理问题漏洞

The Fortinet FortiAuthenticator WEB UI is the web interface for a centralized user identity management solution from Fortinet, Inc. A security vulnerability exists in FortiAuthenticator that arises from the use of hard-coded keys to encrypt configuration files, debug logs, and password data. The...

7.5CVSS7.3AI score0.00563EPSS
SaveExploits0References3
Fortinet
Fortinet
added 2021/06/01 12:0 a.m.49 views

FortiAuthenticator - Hard-coded cryptographic keys used to encrypt sensitive data

Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator may allow an attacker with access to the files or the CLI configuration to decrypt the sensitive data, via knowledge of the hard-coded key...

5CVSS7.2AI score0.00563EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2021/04/22 8:15 p.m.9 views

CVE-2021-0266

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

9.8CVSS5.8AI score0.0088EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/04/22 12:0 a.m.10 views

PT-2021-12974 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on cSRX Series versions prior to 20.2R3 Juniper Networks Junos OS on cSRX Series version 20.3 prior to 20.3R2 Juniper Networks Junos OS on cSRX Series version 20.4 prior to 20.4R2 Description: The issue in Juniper...

9.8CVSS9.5AI score0.0088EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/08 6:15 p.m.6 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.5CVSS7.1AI score0.006EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/08 5:52 p.m.29 views

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

7.4AI score0.006EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/24 12:0 a.m.12 views

Helpcom 信任管理问题漏洞

Helpcom is an application from the Korean company Helpcom. It provides remote control services. A security vulnerability exists in versions prior to Helpcom v10.0 that stems from storing hard-coded encryption keys. No detailed vulnerability details are provided at this time...

8.8CVSS7.3AI score0.01027EPSS
SaveExploits0References2
NVD
NVD
added 2020/12/29 11:15 p.m.20 views

CVE-2020-10210

Because of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series, Kami7B, an attacker may remotely log in through SSH...

10CVSS9.5AI score0.01544EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/11/04 12:0 a.m.6 views

Konzept-iX PubliXone Information Disclosure Vulnerability

Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. PubliXone 2019.045 suffers from an information disclosure vulnerability that can cause cross-site scripting, account takeover, lack of access control, hard-coded keys, and file download...

7.5CVSS6.2AI score0.01234EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/04 12:0 a.m.5 views

Konzept-iX PubliXone Encryption Problem Vulnerability

Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. Konzept-iX PubliXone version 2019.045 suffers from an encryption issue vulnerability that causes PubliXone to suffer from cross-site scripting, account takeover, lack of access control,...

6.5CVSS6.7AI score0.00942EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/04 12:0 a.m.10 views

Konzept-iX PubliXone Information Disclosure Vulnerability (CNVD-2020-60716)

Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. An information disclosure vulnerability exists in Konzept-iX PubliXone version 2019.045, which exposes PubliXone to cross-site scripting, account takeover, lack of access control, hard-cod...

9.8CVSS6.2AI score0.01364EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/11/04 12:0 a.m.9 views

Konzept-iX PubliXone Cross-Site Scripting Vulnerability

Konzept-iX PubliXone is a media production and document editing software from the German company Konzept-iX. A cross-site scripting vulnerability exists in Konzept-iX PubliXone version 2019.045, which exposes PubliXone to cross-site scripting, account takeover, lack of access control, hard-coded...

6.1CVSS6.2AI score0.00822EPSS
SaveExploits0References1
Rows per page
Query Builder