Lucene search
K

3819 matches found

CNNVD
CNNVD
added 2023/11/29 12:0 a.m.2 views

Zumtobel Netlink CCD Onboard Security Breach

The Zumtobel Netlink CCD Onboard is a gateway control unit device from Zumtobel Austria. A security vulnerability exists in the Zumtobel Netlink CCD Onboard 3.74 onboard version 3.80 firmware version, which originates when the system contains hard-coded credentials for the administrator account...

9.8CVSS6.8AI score0.00871EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.2 views

The vulnerability of the web interface of Technicolor TG670 router software, related to the possibility of using strictly encrypted login credentials, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of the microprogramming software for the Technicolor TG670 lies in the possibility of using hard-coded credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

10CVSS7.1AI score0.00503EPSS
Exploits0References5Affected Software1
CNVD
CNVD
added 2023/11/17 12:0 a.m.38 views

Fortinet FortiClient Hardcoding Vulnerability

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

5.5CVSS7AI score0.00205EPSS
Exploits0References1
OSV
OSV
added 2023/11/16 8:15 a.m.2 views

CVE-2023-44296

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

5.5CVSS5.8AI score0.00192EPSS
Exploits0References1
Prion
Prion
added 2023/11/16 8:15 a.m.21 views

Hardcoded credentials

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. ...

7.5CVSS7.1AI score0.01091EPSS
Exploits0References3
Prion
Prion
added 2023/11/16 8:15 a.m.18 views

Hardcoded credentials

Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially exploit this vulnerability, leading to unauthorized access to sensitive data. Successful exploitation may result in the compromise of confidential user information...

1.7CVSS6.7AI score0.00192EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/11/16 12:0 a.m.2 views

Dell ELab Trust Management Issues Vulnerabilities

Dell ELab is the interoperability testing lab of Dell Inc. A security vulnerability exists in Dell ELab-Navigator version 3.1.9, which originated when the system contained hard-coded credentials that led to the disclosure of confidential user information, which could be exploited by an attacker t...

8.4CVSS6.6AI score0.00192EPSS
Exploits0References2
NVD
NVD
added 2023/11/14 7:15 p.m.12 views

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

5.5CVSS0.00195EPSS
Exploits0References1
OSV
OSV
added 2023/11/14 7:15 p.m.3 views

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

5.5CVSS5.8AI score0.00195EPSS
Exploits0References1
OSV
OSV
added 2023/11/14 6:15 p.m.3 views

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

5.5CVSS5.8AI score0.00205EPSS
Exploits0References1
NVD
NVD
added 2023/11/14 6:15 p.m.13 views

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

5.5CVSS0.00205EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/11/14 6:8 p.m.19 views

CVE-2023-40719

A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an attacker to access Fortinet private testing data via the use of static credentials...

4.1CVSS5.7AI score0.00195EPSS
Exploits0References1
CVE
CVE
added 2023/11/14 6:8 p.m.91 views

CVE-2023-40719

CVE-2023-40719 concerns Fortinet FortiAnalyzer and FortiManager where a hard-coded credentials vulnerability affects FortiAnalyzer/FortiManager versions 7.0.0–7.0.8, 7.2.0–7.2.3, and 7.4.0. The underlying issue permits an attacker to access Fortinet private testing data via static credentials. Re...

5.5CVSS5.5AI score0.00195EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2023/11/14 6:7 p.m.24 views

CVE-2023-33304

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections via the use of static credentials...

4.4CVSS5.8AI score0.00205EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.4 views

PT-2023-7272 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClient versions 7.0.0 through 7.0.9 Fortinet FortiClient versions 7.2.0 through 7.2.1 Description: The issue is related to the use of hard-coded credentials in Fortinet FortiClient for Windows, allowing an attacker to bypass...

5.5CVSS5.3AI score0.00205EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.3 views

PT-2023-7380 · Fortinet · Fortimanager +1

Name of the Vulnerable Software and Affected Versions: Fortinet FortiAnalyzer and FortiManager versions 7.0.0 through 7.0.8 Fortinet FortiAnalyzer and FortiManager versions 7.2.0 through 7.2.3 Fortinet FortiAnalyzer and FortiManager version 7.4.0 Description: A use of hard-coded credentials issue...

5.5CVSS5.5AI score0.00195EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.4 views

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A hard-coded vulnerability exists in Fortinet FortiClien...

5.5CVSS7AI score0.00205EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.3 views

Fortinet FortiAnalyzer Security Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is primarily used to collect network log data and analyze, report, and archive security events, network traffic, and Web content from the logs through the Reporting...

5.5CVSS6.7AI score0.00195EPSS
Exploits0References3
Veracode
Veracode
added 2023/11/10 5:57 a.m.20 views

Use Of Hard-coded Credentials

labelstudio is vulnerable to Hard-coded Credentials. An attacker is able to forge session tokens using the hardcoded secret key, which could allow them to impersonate any user on a vulnerable Label Studio instance. The attacker could exploit this vulnerability by sending a specially crafted HTTP...

9.8CVSS7AI score0.01241EPSS
Exploits3References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/06 7:26 p.m.7 views

CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials

Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server...

9.8CVSS7AI score0.00536EPSS
Exploits0References1
Rows per page
Query Builder