CVE-2024-21764

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-21764

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

PT-2024-1903 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: Totolink X6000R version 9.4.0cu.852 B20230719 Description: A vulnerability was found in the file /etc/shadow of the Totolink X6000R, which is related to the use of hard-coded credentials. The manipulation of this vulnerability can lead to...

CVE-2024-21764

CVE-2024-21764 affects Rapid SCADA, specifically versions prior to 5.8.4. The issue is caused by the use of hard-coded credentials, which may allow a remote attacker to connect to a specific port and, according to the PT-2024-1449 entry, could enable full control of the system. Remediation guidan...

CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-21764 Use of Hard-Coded Credentials in Rapid SCADA

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2023-46706 MachineSense FeverWarn Use of Hard-coded Credentials

Multiple MachineSense devices have credentials unable to be changed by the user or administrator...

CVE-2023-46706 MachineSense FeverWarn Use of Hard-coded Credentials

Multiple MachineSense devices have credentials unable to be changed by the user or administrator...

CVE-2024-1039

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

CVE-2024-1039

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

CVE-2023-46706: Use of Hard-coded Credentials

Multiple MachineSense devices have credentials unable to be changed by the user or administrator...

CVE-2024-1039: Use of Hard-coded Credentials

Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device...

PT-2024-16239 · Gessler Gmbh · Web-Master

Name of the Vulnerable Software and Affected Versions: Gessler GmbH WEB-MASTER affected versions not specified Description: The issue concerns a restoration account in Gessler GmbH WEB-MASTER that utilizes weak, hard-coded credentials. If exploited, this could grant an attacker control over the...

Gessler GmbH WEB-MASTER Authorization Issue Vulnerability

Gessler GmbH WEB-MASTER is an emergency lighting management system from Gessler GmbH, Germany. A security vulnerability exists in Gessler GmbH WEB-MASTER version 7.9, which stems from the use of weakly hard-coded credentials to recover accounts, and which could be exploited by an attacker to take...

CVE-2024-21764: Use of Hard-coded Credentials

In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to connect to a specific port...

CVE-2024-24324: Use of Hard-coded Credentials

TOTOLINK A8000RU v7.1cu.643B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow...

Alpha Innotec Novelan Heat Pump Full Access

The vulnerability of Alpha Innotec and Novelan thermal pump microprogramming systems is related to the use of pre-set configuration data in the wp2reg-V3.88.0-9015 file. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the device by using...

CVE-2023-51840

DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key...

CVE-2023-51840: Use of Hard-coded Credentials

DoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key...

DoraCMS Security Vulnerability

DoraCMS is a software application. A content management system written on Nodejs + eggjs + mongodb. A security vulnerability exists in DoraCMS version 2.1.8, which stems from the use of hard-coded encryption keys...