3778 matches found
CVE-2021-20155
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...
CVE-2021-20155
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...
Hardcoded credentials
Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded credentials, which can allow a remote attacker to gain administrative access to the zebra or ripd those services. Both are running with root privileges on the router i.e., as the "admin" user, UID 0...
Hardcoded credentials
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...
Hardcoded credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...
CVE-2021-45732
Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...
CVE-2021-20170
Netgear RAX43 (firmware 1.0.3.96) is affected by a hardcoded credential issue. The backup configuration is encrypted with a password-protected ZIP using a hardcoded password (RAX50w!a4udk). A user who can access the backup mechanism can unzip the configuration with this password, modify settings,...
CVE-2021-20170
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...
CVE-2021-20155
The CVE-2021-20155 entry applies to Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The vulnerability arises from hardcoded credentials used to encrypt configuration data and the ability to back up/restore device configurations via the management web interface, exposing potential exposure of confi...
CVE-2021-45732: Use of Hard-coded Credentials
Netgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted/obfuscated. By extracting the configuration using readily available public tools,...
CVE-2021-20170: Use of Hard-coded Credentials
Netgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal users are intended to be able to manipulate configuration backups due to the fact that they are encrypted. This encryption is accomplished via a password-protected zip file with a hardcoded password...
Commvault CommCell Authentication Bypass (CVE-2021-34996)
An authentication bypass exists in Commvault CommCell. The vulnerability is due to use of hardcoded credentials to access CVSearchService endpoint...
PT-2021-13822
Name of the Vulnerable Software and Affected Versions: Netgear RAX43 version 1.0.3.96 Description: The issue arises from the use of hardcoded credentials in the Netgear RAX43. Specifically, configuration backups are encrypted using a password-protected zip file with a hardcoded password...
CVE-2021-20155: Use of Hard-coded Credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to backup and restore device configurations via the management web interface. These devices are encrypted using a hardcoded password of "12345678"...
PT-2021-13810
Name of the Vulnerable Software and Affected Versions: Trendnet AC2600 TEW-827DRU version 2.08B01 Description: The issue concerns the use of hardcoded credentials in the device. It is possible to backup and restore device configurations via the management web interface. These devices are encrypte...
CVE-2021-45520: Use of Hard-coded Credentials
Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.10, and RBS350 before 4.4.0.10...
Hardcoded credentials
The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage...
Hardcoded credentials
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials...
Hardcoded credentials
Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges...