CVE-2021-46008

In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on...

Baicells Nova436Q and Neutrino 430 have vulnerabilities related to trust management.

The Baicells Nova436Q and Baicells Neutrino 430 are both products of Baicells Incorporated, U.S.A. The Baicells Nova436Q is a state-of-the-art dual-carrier outdoor eNodeB eNB.The Baicells Neutrino 430 is a dual-carrier pico-microcell. A security vulnerability exists in the firmware of the Baicell...

CVE-2021-46008: Use of Hard-coded Credentials

In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on...

TotoLink A3100R Trust Management Vulnerability

TotoLink A3100R is a series of wireless routers from TotoLink, a Taiwan-based company. TotoLink A3100R version V5.9c.4577 is vulnerable to a trust management issue, which stems from the fact that the telnet password is hard-coded and pre-populated in the official firmware, and an attacker connect...

PT-2022-12500

Name of the Vulnerable Software and Affected Versions totolink a3100r version V5.9c.4577 Description The issue concerns a hard-coded telnet password in the official released firmware, which can be easily discovered. An attacker connected to the Wi-Fi can exploit this by telnetting into the target...

Yokogawa CENTUM and Exaopc Use of Hard-Coded Credentials (CVE-2022-23402)

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00 This plugin only works with Tenable.ot. Please visit...

CVE-2022-25521: Use of Hard-coded Credentials

NUUO v03.11.00 was discovered to contain access control issue...

Man-in-the-Middle (MitM)

kubeclient is vulnerable to man-in-the-middle attacks. The attacker is able to steal user credentials to the cluster via a crafted certificate because the context function in Config returns hard-coded VERIFYNONE when the custom CA is not defined...

CVE-2022-25577: Use of Hard-coded Credentials

ALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite database containing the user's data. Attackers who are able to gain remote or local access to the system are able to read and modify the data...

ALF-BanCo Trust Management Vulnerability

ALF-BanCo is a home banking software from the German company ALF-BanCo. It can manage various bank accounts, Paypal accounts and many credit cards. A trust management issue vulnerability exists in ALF-BanCO version v8.2.5, which originates from hard-coding passwords to encrypt SQLite databases...

Yokogawa CENTUM and Exaopc

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Yokogawa Equipment: CENTUM and Exaopc Vulnerabilities: Use of Hard-coded Credentials, Relative Path Traversal, Improper Output Neutralization for Logs, OS Command Injection, Permissions, Privileges...

CVE-2021-27430: Use of Hard-coded Credentials

GE UR bootloader binary Version 7.00, 7.01 and 7.02 included unused hardcoded credentials. Additionally, a user with physical access to the UR IED can interrupt the boot sequence by rebooting the UR...

CVE-2021-45877

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page...

CVE-2021-45877

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page...

CVE-2021-45877

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page...

CVE-2021-45877

Multiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded credential exist in /etc/tomcat8/tomcat-user.xml, which allows attackers to gain authorized access and control the tomcat completely on port 8000 in the tomcat manger page...

CVE-2021-45877

CVE-2021-45877 affects multiple GARO Wallbox GLB/GTB/GTC versions; root cause is a hard-coded credential in /etc/tomcat8/tomcat-user.xml that allows attackers to gain authorized access and take full control of Tomcat on port 8000 (Tomcat manager page). The connected sources corroborate the impact...

GARO Wallbox GLB/GTB/GTC: Vulnerabilities in Trust Management

The GARO Wallbox GLB/GTB/GTC is an electric vehicle charger from the Swedish company GARO. A security vulnerability exists in the GARO Wallbox GLB/GTB/GTC that originates from the presence of a hard-coded credential in /etc/tomcat8/tomcat-user.xml. An attacker can use this vulnerability to gain...

CVE-2020-25193

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection...

CVE-2020-25193 GE Reason RT43X Clocks Use of Hard-coded Cryptographic Key

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06, attackers would be able to intercept and decrypt encrypted traffic through an HTTPS connection...