Lucene search
K

3819 matches found

CVE
CVE
added 2023/09/06 9:27 a.m.50 views

CVE-2023-32619

CVE-2023-32619 affects TP‑LINK Archer C50 and C55 devices with JP firmware releases prior to C50_V3_230505 and C55_V1_230506, where hard-coded credentials enable a network‑adjacent, unauthenticated attacker to execute arbitrary OS commands. Root cause: hard-coded login credentials in affected fir...

8.8CVSS8.7AI score0.00344EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/09/06 9:27 a.m.19 views

CVE-2023-32619

Archer C50 firmware versions prior to 'Archer C50JPV3230505' and Archer C55 firmware versions prior to 'Archer C55JPV1230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command...

9AI score0.00344EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/06 12:0 a.m.2 views

PT-2023-23914 · Tp Link · Archer C55 +1

Name of the Vulnerable Software and Affected Versions: Archer C50 versions prior to Archer C50JP V3 230505 Archer C55 versions prior to Archer C55JP V1 230506 Description: The affected devices use hard-coded credentials to login, which may allow a network-adjacent unauthenticated attacker to...

8.8CVSS7.8AI score0.00344EPSS
Exploits0References9
ICS
ICS
added 2023/09/05 6:0 a.m.26 views

Fujitsu Limited Real-time Video Transmission Gear "IP series"

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION: Exploitable remotely Vendor: Fujitsu Limited Equipment: Real-time Video Transmission Gear "IP series" Vulnerability: Use Of Hard-Coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could result in an attacker logging into...

7.5CVSS7.7AI score0.0299EPSS
Exploits0References9
NVD
NVD
added 2023/08/31 4:15 p.m.9 views

CVE-2023-31173

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before...

8.4CVSS8AI score0.00199EPSS
Exploits0References2
OSV
OSV
added 2023/08/31 4:15 p.m.4 views

CVE-2023-31173

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before...

8.4CVSS5.8AI score0.00199EPSS
Exploits0References2
Prion
Prion
added 2023/08/31 4:15 p.m.19 views

Hardcoded credentials

Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before...

4.6CVSS8.4AI score0.00199EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/08/31 3:30 p.m.42 views

CVE-2023-31173

CVE-2023-31173 affects Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator for Windows, with the root cause identified as hard-coded credentials that enable authentication bypass. The issue applies to versions before 4.5.0.20. According to the connected sources, the vulnerability i...

8.4CVSS8.1AI score0.00199EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/08/31 12:0 a.m.3 views

Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator 信任管理问题漏洞

Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator is a freely distributed software tool from Schweitzer Engineering Laboratories, Inc. --- Grid Configurator allows engineers and technicians to quickly create, manage and deploy settings for SEL power system equipment. A security...

8.4CVSS7.8AI score0.00199EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/08/31 12:0 a.m.4 views

PT-2023-5227 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator versions prior to 4.5.0.20 Description: The issue is related to the use of hard-coded credentials in the SEL-5037 SEL Grid Configurator, which allows authentication bypass. Fo...

8.4CVSS8.3AI score0.00199EPSS
Exploits0References6
OSV
OSV
added 2023/08/28 4:15 a.m.1 views

CVE-2023-38026

SpotCam Co., Ltd. SpotCam FHD 2 has a vulnerability of using hard-coded uBoot credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

9.8CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2023/08/28 4:15 a.m.7 views

CVE-2023-38024

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

9.8CVSS9.6AI score0.0064EPSS
Exploits0References1
OSV
OSV
added 2023/08/28 4:15 a.m.1 views

CVE-2023-38024

SpotCam Co., Ltd. SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. An remote unauthenticated attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service...

9.8CVSS5.9AI score0.0064EPSS
Exploits0References1
CVE
CVE
added 2023/08/28 3:14 a.m.37 views

CVE-2023-38024

CVE-2023-38024 affects SpotCam FHD 2, where a hidden Telnet function uses hard-coded credentials. This allows remote, unauthenticated attackers to log in and perform arbitrary system operations or disrupt service. The vulnerability is tied to the Telnet credential hard-coding in the device’s firm...

9.8CVSS9.6AI score0.0064EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/28 12:0 a.m.2 views

SpotCam FHD 2 信任管理问题漏洞

SpotCam Sense is a camera from ChinaVision.com SpotCam. A trust management issue vulnerability exists in the SpotCam FHD 2 1.0036 firmware version, which stems from the use of hard-coded uBoot credentials, and can be exploited by an attacker to gain access to the system to perform arbitrary syste...

9.8CVSS8.5AI score0.00619EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/08/27 12:0 a.m.5 views

PT-2023-26253 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The issue concerns the use of hard-coded uBoot credentials in the SpotCam FHD 2 device. A remote attacker can exploit this to access the system, perform arbitrary system operations, o...

9.8CVSS9.4AI score0.00619EPSS
Exploits0References7
Zero Day Initiative
Zero Day Initiative
added 2023/08/25 12:0 a.m.25 views

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...

8.8CVSS6.9AI score0.00865EPSS
Exploits0References1
NVD
NVD
added 2023/08/24 7:15 p.m.13 views

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

9.8CVSS9.6AI score0.00691EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/08/24 7:15 p.m.4 views

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

9.8CVSS7.3AI score0.00691EPSS
Exploits0References4
CVE
CVE
added 2023/08/24 6:8 p.m.39 views

CVE-2023-4419

CVE-2023-4419 affects the SICK LMS5xx family, stemming from hard-coded credentials that could allow a remote, unauthenticated attacker to reconfigure settings or disrupt device functionality. Root cause: hard-coded credentials enabling privileged access. Impact per sources: high/critical confiden...

9.8CVSS8.6AI score0.00691EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder