Lucene search
+L

1142 matches found

CVE
CVE
added 2021/07/28 12:5 a.m.58 views

CVE-2020-5351

Dell EMC Data Protection Advisor (versions 6.4, 6.5, and 18.1) contains an undocumented account protected by a hard-coded password. A remote unauthenticated attacker who knows the password can log in and gain read‑only privileges. This is supported by multiple sources in the connected documents (...

7.5CVSS7.8AI score0.01064EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2021/07/28 12:0 a.m.12 views

PT-2021-12397 · Dell Emc · Dell Emc Data Protection Advisor

Name of the Vulnerable Software and Affected Versions: Dell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 Description: The issue concerns an undocumented account with limited privileges that is protected with a hard-coded password. A remote unauthenticated malicious user with knowledge o...

7.5CVSS7.8AI score0.01064EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/07/27 12:0 a.m.10 views

Dell EMC Data Protection Advisor 安全漏洞

Dell EMC Data Protection Advisor is a data protection management solution from Dell Dell. The product supports data backup, data recovery, and data replication management. A security vulnerability exists in Dell EMC Data Protection Advisor versions 6.4, 6.5, and 18.1, which arises from the affect...

7.5CVSS7.3AI score0.01064EPSS
Exploits0References2
seebug.org
seebug.org
added 2021/07/22 12:0 a.m.238 views

D-LINK DIR-3040 Zebra IP 路由管理器信息泄露漏洞(CVE-2021-21817)

The DIR-3040 is an AC3000-based wireless internet router. Zebra is an IP routing manager that provides kernel routing table updates, interface lookups, and redistribution of routes between different routing protocols. The DIR-3040 runs this service by default on TCP port 2601 and can be accessed ...

5CVSS7.5AI score0.02013EPSS
Exploits2
OSV
OSV
added 2021/07/21 3:15 p.m.7 views

CVE-2021-22729

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker to...

9.8CVSS5.8AI score0.01745EPSS
Exploits0References1
Prion
Prion
added 2021/07/21 3:15 p.m.22 views

Hardcoded credentials

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker to...

10CVSS9.4AI score0.01745EPSS
Exploits0References1Affected Software6
CVE
CVE
added 2021/07/21 10:44 a.m.56 views

CVE-2021-22729

The CVE-2021-22729 entry affects Schneider Electric EVlink City (EVC1S22P4 / EVC1S7P4), EVlink Parking (EVW2 / EVF2 / EV.2), and EVlink Smart Wallbox (EVB1A) all versions prior to R8 V3.4.0.1. The root cause is CWE-259: Use of Hard-coded Password, enabling an attacker to gain unauthorized adminis...

10CVSS9.5AI score0.01745EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/21 10:44 a.m.25 views

CVE-2021-22729

A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1, EVlink Parking EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1, and EVlink Smart Wallbox EVB1A all versions prior to R8 V3.4.0.1 that could allow an attacker to...

9.7AI score0.01745EPSS
Exploits0References1
OSV
OSV
added 2021/07/19 5:15 p.m.3 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS5.8AI score0.00418EPSS
Exploits0References3
NVD
NVD
added 2021/07/19 5:15 p.m.26 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS0.00418EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2021/07/19 5:15 p.m.3 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

8.8CVSS6.7AI score0.00418EPSS
Exploits0References4
Cvelist
Cvelist
added 2021/07/19 4:31 p.m.37 views

CVE-2021-36799

KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

6.4AI score0.00418EPSS
Exploits0References3
CVE
CVE
added 2021/07/19 4:31 p.m.95 views

CVE-2021-36799

CVE-2021-36799 : KNX ETS5 through 5.7.6 uses a hard-coded password (ETS5Password) with a salt value (Ivan Medvedev), enabling local users to read project information. This vulnerability is limited to products no longer supported by the maintainer. No public remediation or patch details are provid...

8.8CVSS6AI score0.00418EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.3 views

KNX ETS5 Professional 信任管理问题漏洞

KNX ETS5 Professional is an application software from KNX Corp. a manufacturer-independent configuration software tool for designing and configuring smart home and building controls using the KNX system. A trust management issue vulnerability exists in KNX ETS5 Professional that stems from the...

8.8CVSS6.7AI score0.00418EPSS
Exploits0References4
CNNVD
CNNVD
added 2021/07/19 12:0 a.m.8 views

LearningDigital Orca HCM digital learning platform 安全漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. A security vulnerability exists in the Orca HCM digital learning platform, which stems from the platform's use of a weak factory default administrator password, which is hard-coded...

10CVSS8.4AI score0.02378EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/07/19 12:0 a.m.8 views

PT-2021-21366 · Knx Ets · Knx Ets

Name of the Vulnerable Software and Affected Versions: KNX ETS versions 5 through 5.7.6 Description: The issue allows local users to read project information due to the use of a hard-coded password ETS5Password with a salt value of Ivan Medvedev. This problem is specific to products that are no...

8.8CVSS6.7AI score0.00418EPSS
Exploits0References9
NVD
NVD
added 2021/07/16 11:15 a.m.39 views

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

10CVSS0.02962EPSS
Exploits1References1
OSV
OSV
added 2021/07/16 11:15 a.m.8 views

CVE-2021-21820

A hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to code execution. An attacker can send a sequence of requests to trigger this vulnerability...

9.8CVSS7.4AI score
Exploits0References1
OSV
OSV
added 2021/07/16 11:15 a.m.8 views

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS5.8AI score0.01948EPSS
Exploits2References1
NVD
NVD
added 2021/07/16 11:15 a.m.21 views

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

7.5CVSS0.01948EPSS
Exploits2References1
Rows per page
Query Builder