Hardcoded credentials

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key...

CVE-2013-4425

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key...

CVE-2013-4425: Undefined Security Weakness

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key...

PT-2013-5011

Name of the Vulnerable Software and Affected Versions OsiriX versions prior to 5.8 OsiriX versions prior to 2.5-MD Description The issue concerns the DICOM listener in OsiriX, which uses a hardcoded password "SuperSecretPassword" to encrypt the TLS private key file when starting up. This allows...

CVE-2012-4088

The FTP server in Cisco Unified Computing System UCS has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769...

CVE-2012-4088

The FTP server in Cisco Unified Computing System UCS has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769...

CVE-2012-4088

Cisco UCS FTP server vulnerability (CVE-2012-4088) arises from an undocumented hard-coded password for an unspecified user account. An unauthenticated, adjacent attacker could read or modify files by exploiting this credential. Cisco’s advisory (CISCO-SA-20130927-CVE-2012-4088) confirms the issue...

CVE-2012-4088: Undefined Security Weakness

The FTP server in Cisco Unified Computing System UCS has a hardcoded password for an unspecified user account, which makes it easier for remote attackers to read or modify files by leveraging knowledge of this password, aka Bug ID CSCtg20769...

PT-2013-1628

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns a hardcoded password in the FTP server of the Cisco Unified Computing System UCS, which could be exploited by remote attackers to read or modify...

CVE-2013-5934

Open-Xchange AppSuite suffers CVE-2013-5934: the Hazelcast cluster API on Open-Xchange AppSuite 7.0.x (before 7.0.2-rev15) and 7.2.x (before 7.2.2-rev16) contains a hardcoded password used for node joining. This enables remote attackers to expand the cluster by locating the password in the source...

CVE-2013-5934

Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different...

PT-2013-5874

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions 7.0.x through 7.0.2-rev14 Open-Xchange AppSuite versions 7.2.x through 7.2.2-rev15 Description The issue is related to a hardcoded password for node join operations in the source code. This allows remote attacker...

CVE-2013-5934: Undefined Security Weakness

Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 has a hardcoded password for node join operations, which allows remote attackers to expand a cluster by finding this password in the source code and then sending the password in a Hazelcast cluster API call, a different...

CVE-2013-3612

CVE-2013-3612 affects Dahua DVR appliances, where a hardcoded password exists for the root account and an unspecified backdoor account. This facilitates administrative access by remote attackers via authorization requests using (a) ActiveX, (b) a standalone client, or (c) other vectors. The Conne...

CVE-2013-3612

Dahua DVR appliances have a hardcoded password for 1 the root account and 2 an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving a ActiveX, b a standalone client, or c unknown other vectors...

CVE-2013-3612: Undefined Security Weakness

Dahua DVR appliances have a hardcoded password for 1 the root account and 2 an unspecified "backdoor" account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving a ActiveX, b a standalone client, or c unknown other vectors...

CVE-2013-4876

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

CVE-2013-4876

The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt...

CVE-2013-4876

The CVE-2013-4876 entry applies to the Verizon Wireless Network Extender SCS-2U01, where a hardcoded password for the root account enables physically proximate attackers to obtain administrative access via the device login prompt. The description documents the root cause (hardcoded root credentia...

PT-2013-5253

Name of the Vulnerable Software and Affected Versions Verizon Wireless Network Extender SCS-2U01 Description The issue concerns a hardcoded password for the root account in the device, making it easier for attackers with physical access to obtain administrative access by leveraging a login prompt...