1458 matches found
CVE-2024-54747
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54750
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...
CVE-2024-54750
The Ubiquiti U6-LR wireless remote access point, specifically version 6.6.65 , contains a hardcoded password vulnerability in the /etc/shadow file. This flaw allows an attacker to gain root access, providing unauthorized superuser privileges to the system. While Ubiquiti maintains that this does ...
CVE-2024-54749
Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...
CVE-2024-54749
The Ubiquiti U7-Pro wireless remote access point, specifically version 7.0.35 , is affected by a hardcoded password vulnerability located in /etc/shadow. This flaw could potentially allow an attacker to log in as root . The supplier disputes this finding, noting that the password was only identif...
CVE-2024-54750
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...
CVE-2024-54745
WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54749
Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...
CVE-2024-54750: Use of Hard-coded Credentials
Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: In Ubiquiti's view there is no vulnerability as the Hardcoded Password should be after setup not before...
PT-2024-36412 · Ubiquiti · Ubiquiti U7-Pro
Name of the Vulnerable Software and Affected Versions: Ubiquiti U7-Pro version 7.0.35 Description: A hardcoded password vulnerability was discovered in /etc/shadow, which allows attackers to log in as root. However, the supplier disputes this claim, stating that the device cannot be deployed...
PT-2024-36414
Name of the Vulnerable Software and Affected Versions Ubiquiti U6-LR version 6.6.65 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with superuser privileges. Recommendations F...
CVE-2024-54749: Use of Hard-coded Credentials
Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. NOTE: this is disputed by the Supplier because the observation only established that a password is present in a firmware image; however, the device cannot ...
PT-2024-36410
Name of the Vulnerable Software and Affected Versions WAVLINK WN701AE version M01AE V240305 Description A hardcoded password vulnerability was discovered in the /etc/shadow file, allowing attackers to log in as the root user. This issue enables unauthorized access to the system with superuser...
PT-2024-36411
Name of the Vulnerable Software and Affected Versions WAVLINK WN531P3 version 202383 Description A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue enables unauthorized access to the system with elevated privileges. Recommendations F...
CVE-2024-54745: Incorrect Default Permissions
WAVLINK WN701AE M01AEV240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54747
The WAVLINK WN531P3 router (version 202383 ) contains a hardcoded password vulnerability in the /etc/shadow file. This flaw stems from incorrect standard permissions, allowing a malicious actor to bypass security restrictions and gain root access to the system remotely. Exploitation can involve s...
CVE-2024-54747: Incorrect Default Permissions
WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-54745
The WAVLINK WN701AE router (specifically version M01AE_V240305 ) contains a hardcoded password vulnerability in the /etc/shadow file. This issue stems from the incorrect use of standard permissions in the router's microprogramming software. A malicious actor can exploit this flaw to bypass securi...