PT-2021-17459 · Mu320E · Mu320E

Name of the Vulnerable Software and Affected Versions: MU320E versions prior to v04A00.1 Description: The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials. Recommendations: For versions prior to v04A00.1,...

PT-2021-17452 · Unknown · Reason Dr60

Name of the Vulnerable Software and Affected Versions: Reason DR60 versions prior to 02A04.1 Description: The software contains a hard-coded password used for inbound authentication or outbound communication to external components. Recommendations: For versions prior to 02A04.1, update to version...

GE MU320E Hardcoded Password Vulnerability

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. A hard-coded password vulnerability exists in GE MU320E firmware prior to version 04A00.1. An attacker could exploit this vulnerability to take control of the Merge Unit...

GE Reason DR60 Hardcoded Password Vulnerability

The Reason DR60 is a centralized, all-in-one multi-function digital fault recorder DFR from GE. A hard-coded password vulnerability exists in GE Reason DR60 firmware versions prior to 02A04.1. No details of the vulnerability are provided at this time...

Grid Solutions GE Reason DR60 信任管理问题漏洞

The MU320E is a process interface unit from GE with integrated analog and digital merge interfaces. A hard-coded password vulnerability exists in GE MU320E firmware prior to version 04A00.1. An attacker could exploit this vulnerability to take control of the Merge Unit...

Grid Solutions GE Reason DR60 信任管理问题漏洞

The Reason DR60 is a centralized, all-in-one multi-function digital fault recorder DFR from GE. A hard-coded password vulnerability exists in GE Reason DR60 firmware versions prior to 02A04.1. No details of the vulnerability are provided at this time...

GE Reason DR60

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: Reason DR60 Vulnerabilities: Hard-coded Password, Code Injection, Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow...

GE MU320E

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: GE Equipment: MU320E Vulnerabilities: Use of Hard-coded Password, Execution with Unnecessary Privileges, Inadequate Encryption Strength 2. RISK EVALUATION Successful exploitation of these...

FiberHome HG6245D devices 信任管理问题漏洞

The HG6245D is an FTTH ONT router from FiberHome. The FiberHome HG6245D is vulnerable to a hard-coded GEPON password vulnerability. The vulnerability stems from a hardcoded GEPON password defined in /etc/init.d/system-config.sh. No detailed vulnerability details are provided at this time...

Selea Targa IP OCR-ANPR Camera Developer Backdoor Config Overwrite

Selea Targa IP OCR-ANPR Camera Developer Backdoor Config Overwrite Vendor: Selea s.r.l. Product web page: https://www.selea.com Affected version: Model: iZero Targa 512 Targa 504 Targa Semplice Targa 704 TKM Targa 805 Targa 710 INOX Targa 750 Targa 704 ILB Firmware: BLD201113005214 BLD20110616374...

Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite

Exploit Title: Selea Targa IP OCR-ANPR Camera - Developer Backdoor Config Overwrite Date: 07.11.2020 Exploit Author: LiquidWorm Vendor Homepage: https://www.selea.com Selea Targa IP OCR-ANPR Camera Developer Backdoor Config Overwrite Vendor: Selea s.r.l. Product web page: https://www.selea.com...

Selea Targa IP OCR-ANPR Camera Developer Backdoor Config Overwrite

Summary IP camera with optical character recognition OCR software for automatic number plate recognition ANPR also equipped with ADR system that enables it to read the Hazard Identification Number HIN, also known as the Kemler Code and UN number of any vehicle captured in free-flow mode. TARGA is...

CVE-2020-10206

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

Hardcoded credentials

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

CVE-2020-10206

CVE-2020-10206 affects Amino Communications AK45x/AK5xx/AK65x/Aria6xx/Aria7/AK7Xx/Kami7B set-top devices where VNCserver uses a hard-coded password. The underlying issue is hard-coded credentials that allow a local attacker to view and interact with the device’s video output. Public documents con...

CVE-2020-10206

Use of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows local attackers to view and interact with the video output of the device...

CVE-2020-29193

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order...

CVE-2020-29193

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order...

CVE-2020-29193

Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa which is just the asdf keyboard row in reverse order...

CVE-2020-29193

The CVE-2020-29193 entry affects Panasonic Security System WV-S2231L firmware version 4.25, which contains an insecure hard-coded password: lkjhgfdsa. The issue is a credentials-related vulnerability with local access required (CVSS: 3.1, base score 6.8, MEDIUM). No exploit details are provided i...