CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...

CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2

SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes...

CVE-2023-35987

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

Hardcoded credentials

PiiGAB M-Bus contains hard-coded credentials which it uses for authentication...

CVE-2023-35987

CVE-2023-35987 concerns hard-coded credentials in PiiGAB M-Bus authentication. The vulnerability affects the M-Bus SoftwarePack 900S product family and is described in multiple sources (ICS/CISA advisory and CVE records). Root cause: hard-coded credentials used for authentication, enabling remote...

Exploit for Use of Hard-coded Credentials in Clickstudios Passwordstate

CVE-20...

PiiGAB M-Bus

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: PiiGAB, Processinformation i Göteborg Aktiebolag Equipment: M-Bus SoftwarePack 900S Vulnerabilities: Code Injection, Improper Restriction of Excessive Authentication Attempts, Unprotected Transport of...

PiiGAB M-Bus 900S 信任管理问题漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data collection systems or prepaid units from PiiGAB. A vulnerability with trust management issues exists in PiiGAB M-Bus version 900S, which stems from the inclusion of hard-coded credentials for authentication...

PT-2023-25405 · Unknown · Piigab M-Bus

Name of the Vulnerable Software and Affected Versions: PiiGAB M-Bus affected versions not specified Description: The issue concerns hard-coded credentials used for authentication in PiiGAB M-Bus. No information is provided about the estimated number of potentially affected devices or real-world...

CVE-2023-34473

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...

CVE-2023-34473

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...

CVE-2023-34473 Usage of Hard-coded Credentials

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...

CVE-2023-34473 Usage of Hard-coded Credentials

AMI SPx contains a vulnerability in the BMC where a valid user may cause a use of hard-coded credentials. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity, and availability...

CVE-2023-34473

AMI SPx BMC contains a vulnerability (CVE-2023-34473) where a valid user can cause the use of hard-coded credentials. Consequences may include loss of confidentiality, integrity, and availability. Exploitation details are not provided in the sources; no remediation/version fix is specified in the...

Authentication Bypass

sphinx is vulnerable to Authentication Bypass. This vulnerability exists in the use of hard-coded credentials, which enables a local attacker to utilize the default password and bypass the login...

AMI MegaRAC 信任管理问题漏洞

AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. A security vulnerability exists in AMI MegaRA...

VulnCheck KEV: CVE-2010-1573

Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username Gemtek and password gemtekswd for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the 1 data1, 2 data2, or 3 data3 parameters to a Debugcommandpage.asp...

PT-2023-24899 · Ami · Ami Spx

Name of the Vulnerable Software and Affected Versions: AMI SPx affected versions not specified Description: The issue is related to a vulnerability in the BMC of AMI SPx, where a valid user can cause the use of hard-coded credentials. This may lead to a loss of confidentiality, integrity, and...

Exploit for Use of Hard-coded Credentials in Fortinet Fortianalyzer

Decrypt FortiManager configuration secrets CVE-2020-9289 CV...

CVE-2023-28387

"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4.2 and earlier use hard-coded credentials, which may allow a local attacker to analyze data in the app and to obtain API key for an external service...