CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

CVE-2021-22667

CVE-2021-22667 affects Advantech BB-ESWGP506-2SFP-T industrial switches (versions 1.01.09 and prior). The root cause is hard-coded credentials in the device, enabling unauthorized access and arbitrary code execution. ZDI specifies exploitation via the telnet service (port 23) with a hard-coded ad...

PT-2021-15162

Name of the Vulnerable Software and Affected Versions BB-ESWGP506-2SFP-T versions 1.01.09 and prior Description The issue is due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T...

CVE-2021-22667: Use of Hard-coded Credentials

BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T versions 1.01.01 and prior...

Advantech BB-ESWGP506-2SFP-T

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: BB-ESWGP506-2SFP-T Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain unauthorized...

CVE-2021-27228: Use of Hard-coded Credentials

An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names such as constructor or hasOwnProperty to convince the System that the supplied API Key exists...

IBM Security Verify Information Queue Hardcoded Credentials Vulnerability

IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. A hard-coded credentials vulnerability exists in IBM Security Verify Information Queue. An attacker could exploit the...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11335)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded gestiontelebucaramanga/t3l3buc4r4m4ng42013 credentials against an ISP. No detailed vulnerability details are...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11334)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credential vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded adminpldt/z6dUABtl270qRxt7a2uGTiw credentials against an ISP. No detailed vulnerability details are provided a...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11333)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded telecomadmin/nE7jA%5m credentials against an ISP. No detailed vulnerability details are available at this tim...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11329)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded fi!b@er$h%o^mesuperadmin/sfuh+g|u credentials against an ISP. No details of the vulnerability are provided at...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11328)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hardcoded user/user1234 credentials against an ISP. No details of the vulnerability are provided at this time...

FiberHome HG6245D Hardcoded Credential Vulnerability (CNVD-2021-11339)

The HG6245D is an FTTH ONT router from FiberHome. A hard-coded credentials vulnerability exists in the FiberHome HG6245D. The vulnerability stems from the web daemon containing hard-coded admin/G0R2U1P2ag credentials against an ISP. No details of the vulnerability are provided at this time...

Router Security

This report is six months old, and I dont know anything about the organization that produced it, but it has some alarming data about router security. Conclusion: Our analysis showed that Linux is the most used OS running on more than 90% of the devices. However, many routers are powered by very o...

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

CVE-2020-9306

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...

Hardcoded credentials

Tesla SolarCity Solar Monitoring Gateway through 5.46.43 has a "Use of Hard-coded Credentials" issue because Digi ConnectPort X2e uses a .pyc file to store the cleartext password for the python user account...