Lucene search
+L

11722 matches found

CNVD
CNVD
•added 2021/09/02 12:00 a.m.•60 views

MIK.starlight has unspecified vulnerabilities

MIK.starlight is the departmental access and creation dashboard, reporting and planning environment. A security vulnerability exists in MIK.starlight version 7.9.5.24363, which stems from the use of hard-coded keys in the software, which allows an attacker to decrypt credentials via an unspecifie...

5.5CVSS5.6AI score0.00319EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/31 10:00 p.m.•30 views

CVE-2021-34571

Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM...

6.5CVSS6.7AI score0.00226EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/08/31 6:15 p.m.•21 views

CVE-2021-36234

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors...

5.5CVSS6.1AI score0.00319EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/31 6:15 p.m.•15 views

CVE-2021-36234

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors...

5.5CVSS5.9AI score0.00319EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/08/31 5:45 p.m.•46 views

CVE-2021-36234

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors...

5.6AI score0.00319EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/31 5:45 p.m.•67 views

CVE-2021-36234

CVE-2021-36234 affects the MIK.starlight 7.9.5.24363 release. The root cause is a hard-coded cryptographic key , which could allow local attackers to decrypt credentials via unspecified vectors. The impact described across sources indicates a confidential data exposure risk (credentials decrypted...

5.5CVSS5.3AI score0.00319EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2021/08/31 11:15 a.m.•17 views

CVE-2021-34565

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials...

9.8CVSS6.4AI score0.0103EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/31 11:15 a.m.•29 views

CVE-2021-34565

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials...

9.8CVSS0.0103EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/08/31 10:33 a.m.•39 views

CVE-2021-34565 In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials...

9.8CVSS9.6AI score0.0103EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/31 10:33 a.m.•77 views

CVE-2021-34565

The CVE-2021-34565 vulnerability affects Pepperl+Fuchs WirelessHART-Gateway versions 3.0.7–3.0.9, where SSH and Telnet services run with hard-coded credentials. This is reported with high impact: remote access to the gateway could be obtained (CVSS v3.1 base score 9.8). Public advisories (ICS/CIS...

9.8CVSS9.5AI score0.0103EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/31 12:00 a.m.•6 views

CVE-2021-34565: Use of Hard-coded Credentials

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.7 to 3.0.9 the SSH and telnet services are active with hard-coded credentials...

9.8CVSS5.8AI score0.0103EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/31 12:00 a.m.•19 views

Pepperl Fuchs WirelessHART-Gateway has vulnerabilities related to trust management.

The Pepperl Fuchs WirelessHART-Gateway is a gateway device from Pepperl Fuchs, Germany. A trust management issue vulnerability exists in Pepperl Fuchs WirelessHART-Gateway versions 3.0.7 through 3.0.9, which arises when SSH and telnet services are active using hard-coded credentials...

9.8CVSS7.2AI score0.0103EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/08/31 12:00 a.m.•32 views

IBM Sterling Secure Proxy Hardcoded Credentials Vulnerability

IBM Sterling Secure Proxy creates a security barrier for trusted networks by preventing direct connections between external partners and internal servers. IBM Sterling Secure Proxy versions 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contain a hard-coded credential vulnerability. An attacker could use thi...

4.9CVSS3.4AI score0.0099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/31 12:00 a.m.•5 views

PT-2021-21189

Name of the Vulnerable Software and Affected Versions MIK.starlight version 7.9.5.24363 Description The issue involves the use of a hard-coded cryptographic key, allowing local users to decrypt credentials via unspecified vectors. Recommendations For MIK.starlight version 7.9.5.24363, consider...

5.5CVSS0.00319EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/08/31 12:00 a.m.•16 views

PT-2021-20550 · Pepperl+Fuchs · Wirelesshart Gateway

Name of the Vulnerable Software and Affected Versions: PEPPERL+FUCHS WirelessHART-Gateway versions 3.0.7 through 3.0.9 Description: The issue concerns hard-coded credentials in the SSH and telnet services of the affected device. Recommendations: For versions 3.0.7 through 3.0.9, consider disablin...

9.8CVSS6.8AI score0.0103EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/31 12:00 a.m.•8 views

CVE-2021-36234: Use of Hard-coded Credentials

Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors...

5.5CVSS5.8AI score0.00319EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/31 12:00 a.m.•23 views

MIK.starlight Trust Management Vulnerability

MIK.starlight is the departmental access and creation dashboard, reporting and planning environment. A security vulnerability exists in MIK.starlight version 7.9.5.24363, which stems from the use of hard-coded keys in the software, which allows an attacker to decrypt credentials via an unspecifie...

5.5CVSS5.6AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/30 5:15 p.m.•22 views

CVE-2021-29728

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160...

4.9CVSS0.0099EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/08/30 5:15 p.m.•24 views

CVE-2021-29728

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160...

4.9CVSS5.5AI score0.0099EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/08/30 5:00 p.m.•32 views

CVE-2021-29728

IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160...

4.9CVSS5.3AI score0.0099EPSS
SaveExploits0References3
Rows per page
Query Builder