5904 matches found
CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
CVE-2024-38281 Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
Motorola Solutions Vigilant License Plate Readers
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : Motorola Solutions Equipment : Vigilant Fixed LPR Coms Box BCAV1F2-C600 Vulnerabilities : Authentication Bypass Using an Alternate Path or Channel, Cleartext Storage in a File or on Disk, Us...
Motorola Solutions Vigilant Fixed LPR Coms Box Trust Management Issues Vulnerability
Motorola Solutions Vigilant Fixed LPR Coms Box is a license plate recognition system from Motorola Solutions USA. The Motorola Solutions Vigilant Fixed LPR Coms Box suffers from a trust management issue vulnerability that stems from an attacker being able to access the maintenance console using...
CVE-2024-38281: Use of Hard-coded Credentials
An attacker can access the maintenance console using hard coded credentials for a hidden wireless network on the device...
PT-2024-27920 · Motorola Solutions +1 · Vigilant Fixed Lpr Coms Box +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker can access the maintenance console using hard-coded credentials for a hidden wireless network on the device. Recommendations: At the moment,...
CVE-2024-0865
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...
CVE-2024-0865
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...
CVE-2024-0865
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...
CVE-2024-0865
CVE-2024-0865 affects Schneider Electric EcoStruxure IT Gateway (installer). Root cause: hard-coded credentials in the installer enable local privilege escalation for users with low privileges; attacker must already execute code locally. Exploitation details are described in ZDI reports (local es...
CVE-2024-0865: Use of Hard-coded Credentials
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege escalation when logged in as a non-administrative user...
PT-2024-19321
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description A use of hard-coded credentials issue could lead to local privilege escalation when logged in as a non-administrative user. Recommendations At the moment, there is no information abou...
CVE-2024-29855: Use of Hard-coded Credentials
Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...
PT-2024-4063 · Veeam · Veeam Recovery Orchestrator
Name of the Vulnerable Software and Affected Versions: Veeam Recovery Orchestrator affected versions not specified Description: The issue is related to the use of hard-coded credentials in the Veeam Recovery Orchestrator web console, which can allow a remote attacker to bypass authentication and...
Dell PowerScale OneFS Trust Management Issue Vulnerability (CNVD-2024-29346)
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...
CVE-2023-49221: Use of Hard-coded Credentials
Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...
CVE-2023-49224: Use of Hard-coded Credentials
Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...
CVE-2023-49223: Use of Hard-coded Credentials
Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...
CVE-2023-49222: Use of Hard-coded Credentials
Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...
CVE-2024-29170
Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure of network traffic and denial of service...