CVE-2023-48251

CVE-2023-48251 describes a remote SSH authentication vulnerability allowing root login via a hidden hard-coded account. Reported impact includes high-severity outcomes (confidentiality, integrity, availability) with CVSS v3.1 scores: up to 9.8 (NVD) and 8.1 (PSIRT/Bosch). Documented target famili...

CVE-2023-48251

The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2023-48250

CVE-2023-48250 affects Bosch Nexo devices; vulnerable component is the web authentication layer with hard-coded hidden accounts, enabling remote authentication with high privileges. Documents mention NEXO-OS and Bosch Nexo cordless nutrunner as affected, with the root cause cited as multiple hard...

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts...

CVE-2024-20658

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

CVE-2024-20658

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability...

CVE-2024-20658 Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

CVE-2024-20658

CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...

GHSA-G777-CRP9-M27G Apprite CLI makes Use of Hard-coded Credentials

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

Apprite CLI makes Use of Hard-coded Credentials

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

...

Microsoft Manage Virtual Hard Disks Security Vulnerability

Microsoft Manage Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Manage Virtual Hard Disks. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10...

TP-Link Tapo C200 Security Vulnerability

The TP-LINK Tapo C200 is a webcam device from China P&L TP-LINK. A security vulnerability exists in TP-Link Tapo C200 v2.12.703 and earlier versions, which stems from the inclusion of hard-coded API tokens that can be exploited by an attacker to gain access to sensitive Tapo user data...

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

CVE-2023-50948

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

CVE-2023-50948 IBM Storage Fusion HCI information disclosure

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...

CVE-2023-50948 IBM Storage Fusion HCI information disclosure

IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 275671...