Lucene search
+L

11721 matches found

Prion
Prion
•added 2021/12/08 1:15 p.m.•33 views

Hardcoded credentials

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering...

5CVSS7.4AI score0.01121EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/12/08 12:16 p.m.•20 views

CVE-2021-26108

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering...

7.5CVSS6.7AI score0.01121EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/12/08 12:00 a.m.•37 views

Fortinet FortiOS Trust Management Vulnerability

Fortinet FortiOS is a security operating system from Fortinet, Inc. that is designed to be used on the FortiGate network security platform. A security vulnerability exists in Fortinet FortiOS, which stems from the use of hard-coded encryption keys that could allow an attacker to retrieve the keys...

7.5CVSS5.7AI score0.01121EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•6 views

CVE-2021-26108: Use of Hard-coded Credentials

A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering...

7.5CVSS5.8AI score0.01121EPSS
SaveExploits0References2
Fortinet
Fortinet
•added 2021/12/07 12:00 a.m.•99 views

Hardcoded SSLVPN cookie encryption key

A use of hard-coded cryptographic key vulnerability CWE 321 in FortiOS SSLVPN may allow an attacker to retrieve the key by reverse engineering...

7.5CVSS7.2AI score0.01121EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/12/07 12:00 a.m.•15 views

PT-2021-22288

Name of the Vulnerable Software and Affected Versions Raspberry Pi OS versions through 5.10 Description Raspberry Pi OS through version 5.10 uses a default password for the 'pi' account. If this default password is not changed, attackers can obtain administrator privileges. Recommendations...

10CVSS8.2AI score0.15666EPSS
SaveExploits4References19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•12 views

CVE-2021-43044: Use of Hard-coded Credentials

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community...

9.8CVSS5.8AI score0.01923EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•8 views

CVE-2021-43282: Use of Hard-coded Credentials

An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller...

6.5CVSS5.8AI score0.0063EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•6 views

CVE-2021-43284: Use of Hard-coded Credentials

An issue was discovered on Victure WR1200 devices through 1.0.3. The root SSH password never gets updated from its default value of admin. This enables an attacker to gain control of the device through SSH regardless of whether the admin password was changed on the web interface...

7.8CVSS5.8AI score0.00391EPSS
SaveExploits3References2
attackerkb
attackerkb
•added 2021/11/26 5:15 p.m.•20 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS8.5AI score0.01164EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/11/26 5:15 p.m.•33 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS0.01164EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/11/26 5:15 p.m.•26 views

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.8AI score0.01164EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/26 4:31 p.m.•74 views

CVE-2021-26611

CVE-2021-26611 affects the HejHome GKW-IC052 IP Camera, where hard-coded credentials enable remote attackers to operate the device (reboot, factory reset, snapshot, etc.). The available sources consistently describe this as a hard-coded credentials vulnerability impacting the IP camera, treated a...

9.8CVSS8.9AI score0.01164EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/26 4:31 p.m.•48 views

CVE-2021-26611 HejHome IP Camera use of hard-coded credentials vulnerability

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

8.1CVSS9.6AI score0.01164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/26 12:00 a.m.•8 views

PT-2021-17078

Name of the Vulnerable Software and Affected Versions HejHome GKW-IC052 IP Camera affected versions not specified Description The issue allows remote attackers to operate the IP Camera, enabling actions such as reboot, factory reset, and snapshot. This is due to a hard-coded credentials...

9.8CVSS0.01164EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/26 12:00 a.m.•15 views

CVE-2021-26611: Use of Hard-coded Credentials

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

9.8CVSS5.9AI score0.01164EPSS
SaveExploits0References3
NVD
NVD
•added 2021/11/23 8:15 p.m.•26 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS0.0107EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/11/23 8:15 p.m.•17 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS5.8AI score0.0107EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/23 8:00 p.m.•71 views

CVE-2021-36312

CVE-2021-36312 concerns Dell EMC CloudLink, affecting 7.1 and earlier. A hard-coded password vulnerability exists in CloudLink that could allow a remote, high-privileged attacker to gain unauthorized access to affected systems. The issue is documented across multiple sources (NVD entry and CNVD/C...

9.1CVSS8.9AI score0.0107EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/23 8:00 p.m.•30 views

CVE-2021-36312

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system...

9.1CVSS9.2AI score0.0107EPSS
SaveExploits0References1
Rows per page
Query Builder