Lucene search
+L

1142 matches found

Cvelist
Cvelist
added 2021/11/23 8:0 p.m.16 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS9.2AI score0.01036EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/23 12:0 a.m.3 views

Dell EMC CloudLink 安全漏洞

Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private, and hybrid cloud environments.A hard-coded password vulnerability exists in Dell EMC CloudLink 7.1 and earlier versions. An attacker could exploit this vulnerability to gain...

9.1CVSS5.6AI score0.01036EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.18 views

The vulnerability of the microprogrammed logic controller ioLogik’s software, related to hard-coding passwords, allows a intruder to escalate their privileges and execute arbitrary code.

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

10CVSS5.9AI score
Exploits0References1Affected Software1
OSV
OSV
added 2021/11/09 11:15 p.m.3 views

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

5.5CVSS5.8AI score0.00313EPSS
Exploits1References1
NVD
NVD
added 2021/11/09 11:15 p.m.29 views

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

5.5CVSS0.00313EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/11/09 10:45 p.m.31 views

CVE-2021-43575

KNX ETS6 through 6.0.0 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information, a similar issue to CVE-2021-36799. NOTE: The vendor disputes this because it is not the responsibility of the ETS to securely store cryptographic...

6.5AI score0.00313EPSS
Exploits1References1
CVE
CVE
added 2021/11/09 10:45 p.m.48 views

CVE-2021-43575

CVE-2021-43575 affects KNX ETS6 up to version 6.0.0, where a hard-coded password (ETS5Password) and a salt (Ivan Medvedev) enable local users to read project information. This mirrors CVE-2021-36799 for ETS5, and Red Hat entries confirm the vulnerability details and vendor dispute over cryptograp...

5.5CVSS6.8AI score0.00313EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.4 views

PT-2021-23880 · Knx Ets · Knx Ets

Name of the Vulnerable Software and Affected Versions: KNX ETS versions 6.0.0 and earlier Description: The issue allows local users to read project information due to the use of a hard-coded password ETS5Password with a salt value of Ivan Medvedev. This is similar to a previously identified issue...

5.5CVSS6.7AI score0.00313EPSS
Exploits1References5
CNNVD
CNNVD
added 2021/11/09 12:0 a.m.7 views

Ets5 Password Recovery 信任管理问题漏洞

Ets5 Password Recovery is an open source Poc for CVE-2021-36799 by Robert Gutzkow Individual Developer. Ets5 Password Recovery suffers from a trust management issue vulnerability that stems from the software's use of the hard-coded password ETS5Password with a salt value of Ivan Medvedev, which...

8.8CVSS6.7AI score0.00418EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2021/11/01 12:0 a.m.2 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS7.2AI score0.01036EPSS
Exploits0References2
NVD
NVD
added 2021/10/12 2:15 p.m.19 views

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS0.01113EPSS
Exploits0References1
OSV
OSV
added 2021/10/12 2:15 p.m.3 views

CVE-2021-38456

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS7.5AI score0.01113EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/10/12 1:37 p.m.22 views

CVE-2021-38456 Moxa MXview Network Management Software

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

9.8CVSS9.8AI score0.01113EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/05 12:0 a.m.9 views

Moxa Mxview Network Management Software 信任管理问题漏洞

Moxa MXview is a network management software used to monitor and diagnose industrial networks.Moxa MXview is vulnerable to a hard-coded password vulnerability. An attacker could exploit this vulnerability to gain access through an account using the default password...

9.8CVSS8.7AI score0.01113EPSS
Exploits0References5
ICS
ICS
added 2021/10/05 12:0 a.m.99 views

Moxa MXview Network Management Software

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low attack complexity Vendor: Moxa Equipment: MXview Network Management Software Vulnerabilities: Path Traversal, Use of Hard-coded Password, Unprotected Transport of Credentials, Injection, Improper Access Control 2. RISK...

10CVSS9.9AI score0.15789EPSS
Exploits0References5
ICS
ICS
added 2021/08/03 12:0 a.m.63 views

Swisslog Healthcare Translogic PTS

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Swisslog Healthcare Equipment: Translogic PTS Pneumatic Tube Systems Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Improper Authentication, Download of Code without...

10CVSS10AI score0.08227EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2021/08/03 12:0 a.m.32 views

D-Link DIR-3040 < 1.13B03 Hotfix Multiple Vulnerabilities - Active Check

D-Link DIR-3040 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink"; if...

10CVSS6.1AI score0.36486EPSS
Exploits8References6
OSV
OSV
added 2021/07/28 12:15 a.m.8 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS5.8AI score0.01064EPSS
Exploits0References1
NVD
NVD
added 2021/07/28 12:15 a.m.19 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS0.01064EPSS
Exploits0References1
Cvelist
Cvelist
added 2021/07/28 12:5 a.m.25 views

CVE-2020-5351

Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with the knowledge of the hard-coded password may login to the system and gain read-only...

7.5CVSS7.8AI score0.01064EPSS
Exploits0References1
Rows per page
Query Builder