CVE-2023-38024

CVE-2023-38024 affects SpotCam FHD 2, where a hidden Telnet function uses hard-coded credentials. This allows remote, unauthenticated attackers to log in and perform arbitrary system operations or disrupt service. The vulnerability is tied to the Telnet credential hard-coding in the device’s firm...

SpotCam FHD 2 信任管理问题漏洞

SpotCam Sense is a camera from ChinaVision.com SpotCam. A trust management issue vulnerability exists in the SpotCam FHD 2 1.0036 firmware version, which stems from the use of hard-coded uBoot credentials, and can be exploited by an attacker to gain access to the system to perform arbitrary syste...

SpotCam Sense 信任管理问题漏洞

SpotCam Sense is a camera from SpotCam. The SpotCam FHD 2 1.0036 firmware version has a trust management issue vulnerability that originates from the Telnet function using hard-coded Telnet accounts, which can be exploited by an attacker to log in to the system and gain administrative access to a...

PT-2023-26251 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The SpotCam FHD 2’s hidden Telnet function has a vulnerability of using hard-coded Telnet credentials. A remote unauthenticated attacker can exploit this vulnerability to access the...

PT-2023-26253 · Unknown · Spotcam Fhd 2

Name of the Vulnerable Software and Affected Versions: SpotCam FHD 2 affected versions not specified Description: The issue concerns the use of hard-coded uBoot credentials in the SpotCam FHD 2 device. A remote attacker can exploit this to access the system, perform arbitrary system operations, o...

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The server program...

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

CVE-2023-4419

CVE-2023-4419 affects the SICK LMS5xx family, stemming from hard-coded credentials that could allow a remote, unauthenticated attacker to reconfigure settings or disrupt device functionality. Root cause: hard-coded credentials enabling privileged access. Impact per sources: high/critical confiden...

CVE-2023-4419

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device...

Gravitl Netmaker 信任管理问题漏洞

Gravitl Netmaker is a platform for creating and managing fast, secure and dynamic virtual overlay networks using WireGuard from Gravitl USA. For creating and controlling automated virtual networks. A security vulnerability exists in Gravitl Netmaker versions prior to 0.18.6 that stems from the...

PT-2023-4579 · D Link · D-Link Dap-2622

Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2622 routers. The specific flaw exists within the CLI service, which...

SICK LMS5xx 信任管理问题漏洞

The SICK LMS5xx is a series of sensors from SICK, Germany. A security vulnerability exists in the SICK LMS5xx that stems from the use of hard-coded credentials, which could allow an unauthorized, remote attacker to reconfigure settings and/or disrupt the functionality of the device...

CVE-2022-3744

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential...

PT-2023-13539 · Lenovo · Lcfc Bios

Name of the Vulnerable Software and Affected Versions: LCFC BIOS affected versions not specified Description: A potential issue was discovered in LCFC BIOS for some Lenovo consumer notebook models. This could allow a local attacker with elevated privileges to unlock UEFI variables due to a...

VulnCheck KEV: CVE-2019-6693

Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key...

PT-2023-5206 · Fortinet · Fortitester

Name of the Vulnerable Software and Affected Versions: FortiTester versions 2.3.0 through 7.2.3 Description: A use of hard-coded credentials issue in FortiTester may allow an attacker who has gained shell access to the device to access the database via shell commands. This could potentially lead ...

N.V.K.INTER iBSG 信任管理问题漏洞

N.V.K.INTER iBSG NVK iBSG is a security appliance from N.V.K.INTER, Inc. A security vulnerability exists in N.V.K.INTER iBSG version v3.5, which stems from the presence of a hard-coded root password that allows an attacker to log in with root privileges via SSH service...

MOXA NPort IAW5000A-I/O Series Hard-Coded Credential Vulnerability

MOXA NPort IAW5000A-I/O Series is a wireless device server for use in industrial environments from MOXA, China. The server enables the integration of field serial devices with wireless Ethernet networks and incorporates digital IOs for industrial data acquisition applications. A hard-coded...