8293 matches found
Connected IO Trust Management Issues Vulnerability
Connected IO is a leading hardware, software and cloud-based IoT and machine-to-machine solution from US-based Connected IO, Inc. A security vulnerability previously existed in Connected IO version v2.1.0 that stemmed from the use of hard-coded username/password pairs embedded in its device...
CVE-2023-33372
Affected software: Connected IO v2.1.0 and prior. Vulnerability details: uses a hard-coded username/password pair embedded in device firmware for MQTT communication. Impact: an attacker with access to these credentials can connect to the MQTT broker, send messages on behalf of devices, impersonat...
Control ID IDSecure Trust Management Issue Vulnerability
Control ID IDSecure is software from Control ID that controls access to personnel and vehicles in companies of all sizes. A security vulnerability exists in Control ID IDSecure version 4.7.26.0 and prior versions, which stems from the use of a hard-coded key to sign and verify JWT session tokens,...
Moxa AWK-3131A Series Industrial AP/Bridge/Client Use of Hard-Coded Credentials (CVE-2019-5139)
An exploitable use of hard-coded credentials vulnerability exists in multiple iw utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an undocumented encryption password, allowing for the creation of custom diagnostic scripts. This plugin only works with...
Moxa AWK-3131A Series Industrial AP/Bridge/Client Use of Hard-Coded Cryptographic Key (CVE-2019-5137)
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware version 1.13. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Credentials (CVE-2020-6985)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Moxa AWK-3131A Hard-coded Administrator Credentials (CVE-2016-8717)
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices. This...
Moxa PT-7528 and PT-7828 Series Use of Hard-Coded Cryptographic Key (CVE-2020-6983)
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. This plugin only works with Tenable.ot. Please visit...
Moxa EDR-G903 series Hard-coded Credentials (CVE-2012-4712)
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Moxa EDS-G516E and EDS-510E Series Ethernet Switches Use of Hard-Coded Credentials (CVE-2020-6981)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Moxa EDS-G516E and EDS-510E Series Ethernet Switches Use of Hard-Coded Cryptographic Key (CVE-2020-6979)
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
CVE-2023-37215
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials...
CVE-2023-37215
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials...
CVE-2023-32227
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
CVE-2023-32227
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
Hardcoded credentials
Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials...
CVE-2023-37215
CVE-2023-37215 affects JBL Soundbar Multibeam 5.1 with CWE-798 (hard-coded credentials). Affected: JBL soundbar multibeam 5.1. Root cause: hard-coded credentials in the device/software. Impact: per NVD metrics, high confidentiality, integrity, and availability risks (CVSSv3.1 base 9.8; attack vec...
CVE-2023-37215 JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials
JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials...
