Lucene search
+L

11500 matches found

CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•26 views

Cyber Power Systems PowerPanel Business Edition Security Vulnerabilities

Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...

9.8CVSS8.4AI score0.00474EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•27 views

Cyber Power Systems PowerPanel Business Edition Security Vulnerabilities

Cyber Power Systems PowerPanel Business Edition is a suite of power management software from Cyber Power Systems, USA. The software automates the shutdown of physical and virtual infrastructures, and monitors and manages CyberPower UPS systems and network-connected PDUs Power Distribution Units. ...

9.8CVSS8.4AI score0.00513EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•10 views

CVE-2024-32047: Active Debug Code

Hard-coded credentials for the CyberPower PowerPanel test server can be found in the production code. This might result in an attacker gaining access to the testing or production server...

9.8CVSS8.5AI score0.00513EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•7 views

CVE-2024-32053: Use of Hard-coded Credentials

Hard-coded credentials are used by the CyberPower PowerPanel platform to authenticate to the database, other services, and the cloud. This could result in an attacker gaining access to services with the privileges of a Powerpanel business application...

9.8CVSS8.5AI score0.00474EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•10 views

CVE-2024-33625: Use of Hard-coded Password

CyberPower PowerPanel business application code contains a hard-coded JWT signing key. This could result in an attacker forging JWT tokens to bypass authentication...

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/05/15 12:00 a.m.•29 views

SolarWinds Access Rights Manager Hard-Coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SolarWinds Access Rights Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a RabbitMQ instance. The issue results from the use...

8.6CVSS7.9AI score0.01073EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/05/15 12:00 a.m.•24 views

Unspecified Vulnerability in Siemens SIMATIC RTLS Locating Manager (CNVD-2024-23114)

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A security vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to the affected system's use of symmetric ciphers...

10CVSS8.5AI score0.00836EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/14 4:17 p.m.•18 views

CVE-2024-32741

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device...

10CVSS7.9AI score0.00629EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 4:17 p.m.•35 views

CVE-2024-32741

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device...

10CVSS9.4AI score0.00629EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/14 4:16 p.m.•28 views

CVE-2024-30207

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

10CVSS9.4AI score0.00836EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/14 2:59 p.m.•22 views

CVE-2024-23473

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating with...

9.8CVSS7.8AI score0.01073EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/14 2:59 p.m.•33 views

CVE-2024-23473

The SolarWinds Access Rights Manager was found to contain a hard-coded credential authentication bypass vulnerability. If exploited, this vulnerability allows access to the RabbitMQ management console. We thank Trend Micro Zero Day Initiative ZDI for its ongoing partnership in coordinating with...

9.8CVSS8.7AI score0.01073EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/14 10:02 a.m.•33 views

CVE-2024-32741

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device...

10CVSS9.4AI score0.00629EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/14 10:02 a.m.•18 views

CVE-2024-32741

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains hard coded password which is used for the privileged system user root and for the boot loader GRUB by default . An attacker who manages to crack the password hash gains root access to the device...

10CVSS7.9AI score0.00629EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/14 10:02 a.m.•83 views

CVE-2024-32741

Siemens SIMATIC CN 4100 (all versions

10CVSS7.9AI score0.00629EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/05/14 10:02 a.m.•38 views

CVE-2024-30207

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

10CVSS9.5AI score0.00836EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/05/14 10:02 a.m.•18 views

CVE-2024-30207

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

10CVSS8AI score0.00836EPSS
SaveExploits0References1
CVE
CVE
•added 2024/05/14 10:02 a.m.•75 views

CVE-2024-30207

The CVE-2024-30207 entry describes vulnerabilities in Siemens SIMATIC RTLS Locating Manager components (multiple SKUs: 6GT2780-0DA00/0DA10/0DA20/0DA30 and 6GT2780-1EA10/1EA20/1EA30) where communications between client and server rely on symmetric cryptography with a hard-coded key. The underlying...

10CVSS8AI score0.00836EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/14 12:00 a.m.•7 views

PT-2024-4458

Name of the Vulnerable Software and Affected Versions SIMATIC CN 4100 versions prior to V3.0 Description A vulnerability has been identified in the SIMATIC CN 4100 device, where it contains a hard-coded password used for the privileged system user root and for the boot loader GRUB by default. Thi...

10CVSS8AI score0.00629EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•8 views

CVE-2024-30207: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References1
Rows per page
Query Builder