CVE-2017-1787

The CVE-2017-1787 entry concerns IBM Publishing Engine versions 2.1.2 and 6.0.5 with an undisclosed vulnerability that could allow a local administrator to obtain hard-coded credentials. Affected products: Rational Publishing Engine 2.1.2 and 6.0.5. Root cause/impact: local privilege and credenti...

Schneider Electric Pelco Sarix Professional Elevation of Privilege Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67, which stems from the program's use of hard-coded credentials....

Account Password Vulnerabilities in Multiple IBM Products

IBM XIV Storage System 2810-A14 and others are grid-level storage solutions from IBM USA. The solution features hot encryption, advanced mirroring, self-healing, and perpetual licensing. A security vulnerability exists in multiple IBM products that stems from the program containing hard-coded...

CVE-2014-3205

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

CVE-2014-3205

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

CVE-2014-3205

The CVE-2014-3205 issue affects Seagate BlackArmor NAS in backupmgt/pre_connect_check.php, where a backdoor user is authenticated using a hard-coded password '!~@##$$%FREDESWWSED'. The vulnerability is documented across multiple sources (NVD entry, CNVD/CVE records, and CNVD Chinese advisory) and...

Multiple IoT Vendors – Multiple Vulnerabilities

Vulnerabilities summary The following advisory describes three 3 vulnerabilities found in the following vendors: Lorex StarVedia Eminent Kraun The vulnerabilities found: Hard-coded credentials Remote command injection 2 It is possible to chain the vulnerabilities and to achieve unauthenticated...

CVE-2017-12725

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...

CVE-2017-12726

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

CVE-2017-12724

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

Hardcoded credentials

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

Hardcoded credentials

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...

CVE-2017-12724

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

CVE-2017-12726

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

CVE-2017-12725

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...

CVE-2017-12725

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump with default network configuration uses hard-coded credentials to automatically establish a wireless network connection. The pump will establis...

CVE-2017-12726

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that i...

CVE-2017-12724

A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump contains hardcoded credentials, which are not fully initialized. The FTP server is only accessible if the pump is configured ...

CVE-2017-12724

CVE-2017-12724 affects Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (firmware versions 1.1, 1.5, 1.6). The vulnerability stems from hard-coded credentials on the pump’s FTP server, which is only accessible when FTP is enabled, enabling unauthorized access to the device. The ICS-CE...

CVE-2017-12726

The CVE-2017-12726 vulnerability affects the Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump (Versions 1.1, 1.5, 1.6). A hard-coded credential mechanism is used for Telnet, enabling remote access to the pump’s communications module when external network access is allowed. The issue i...