Lucene search
K

8066 matches found

OSV
OSV
added 2020/07/13 7:15 p.m.2 views

CVE-2020-10988

A hard-coded telnet credential in the tendalogin binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device...

9.8CVSS7.4AI score0.02826EPSS
Exploits1References2
Prion
Prion
added 2020/07/13 7:15 p.m.17 views

Hardcoded credentials

A hard-coded telnet credential in the tendalogin binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device...

10CVSS9.3AI score0.02826EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2020/07/13 6:1 p.m.18 views

CVE-2020-10988

A hard-coded telnet credential in the tendalogin binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device...

9.4AI score0.02826EPSS
Exploits1References2
ThreatPost
ThreatPost
added 2020/07/10 1:25 p.m.52 views

Report: Most Popular Home Routers Have ‘Critical’ Flaws

A security review of 127 popular home routers found most contained at least one critical security flaw, according to researchers. The “Home Router Security Report” PDF by Peter Weidenbach and Johannes vom Dorp—both from the German think tank Fraunhofer Institute–found that not only did all of the...

7.8AI score
Exploits0References5
0day.today
0day.today
added 2020/07/10 12:0 a.m.493 views

Rittal Products Bypass / Command Injection / Privilege Escalation Vulnerabilities

Multiple Rittal Products based on the same software suffer from CLI menu bypass, insecure configuration, hard-coded backdoor account, outdated component, command injection, and privilege escalation vulnerabilities. Products include but are not limited to CMC III PU Compact, CMC III PU 7030.000 PD...

10CVSS7.9AI score0.0247EPSS
Exploits7
CNVD
CNVD
added 2020/07/03 12:0 a.m.9 views

Containous Traefik Trust Management Issues Vulnerability (CNVD-2021-18240)

Containous Traefik is a reverse proxy and load balancer from Containous USA. A vulnerability in Containous Traefik version 2.x exists due to a trust management issue. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can...

7.5CVSS6.6AI score0.01557EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.3 views

ZyXEL CloudCNM SecuManager Authentication Bypass Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from ...

9.8CVSS7AI score0.0124EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.3 views

Unspecified Vulnerability in ZyXEL CloudCNM SecuManager

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from...

9.8CVSS7.1AI score0.0124EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.4 views

ZyXEL CloudCNM SecuManager Hardcoded Password Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A security vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1, which originates from...

9.8CVSS7AI score0.0124EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.2 views

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36759)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

5.9CVSS7.6AI score0.00997EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.2 views

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36757)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

5.9CVSS7.6AI score0.00976EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.2 views

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36758)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

5.9CVSS7.6AI score0.00997EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.1 views

ZyXEL CloudCNM SecuManager Trust Management Issues Vulnerability

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

5.9CVSS7.6AI score0.00976EPSS
Exploits1References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.2 views

ZyXEL CloudCNM SecuManager Trust Management Issue Vulnerability (CNVD-2020-36754)

ZyXEL CloudCNM SecuManager is a set of network management software from Taiwan, China-based ZyXEL. The software supports centralized control, device management and intelligent monitoring. A trust management issue vulnerability exists in ZyXEL CloudCNM SecuManager version 3.1.0 and 3.1.1. The...

5.9CVSS7.6AI score0.00976EPSS
Exploits1References1
Fortinet
Fortinet
added 2020/06/30 12:0 a.m.61 views

Protect

Use of a hard-coded cryptographic key to encrypt password data in CLI configuration in FortiOS, FortiManager and FortiAnalyzer may allow an attacker with access to the CLI configuration or the CLI backup file to decrypt the sensitive data, via knowledge of the hard-coded key...

5CVSS6.5AI score0.05352EPSS
Exploits1Affected Software3
OSV
OSV
added 2020/06/29 2:15 p.m.1 views

CVE-2020-12016

Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 have hard-coded administrative account...

9.8CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2020/06/29 2:15 p.m.2 views

CVE-2020-12012

Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 have hard-coded administrative account credentials f...

6.1CVSS6.4AI score0.00345EPSS
Exploits0References1
OSV
OSV
added 2020/06/29 2:15 p.m.3 views

CVE-2020-12045

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 when used in conjunction with a Baxter Spectrum v8.x model 35700BAX2, operates a Telnet service on Port 1023 with hard-coded credentials...

9.8CVSS6.9AI score0.01662EPSS
Exploits0References1
OSV
OSV
added 2020/06/29 2:15 p.m.3 views

CVE-2020-12047

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24, when used with a Baxter Spectrum v8.x model 35700BAX2 in a factory-default wireless configuration enables an FTP service with hard-coded credentials...

9.8CVSS7AI score0.01662EPSS
Exploits0References1
NVD
NVD
added 2020/06/29 2:15 p.m.15 views

CVE-2020-12012

Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 have hard-coded administrative account credentials f...

6.1CVSS0.00345EPSS
Exploits0References1
Rows per page
Query Builder