1353 matches found
Barco wePresent WiPG-1600W Hardcoded Root Password Vulnerability
The Barco wePresent WiPG-1600W is a management device for conference environments from Barco Belgium. A security vulnerability exists in Barco wePresent WiPG-1600W versions 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19, which stems from the inclusion of a hard-coded root password hash in the firmware...
CVE-2020-28329
Barco wePresent WiPG-1600W is affected by CVE-2020-28329 and related CVEs due to hardcoded credentials in the firmware. Affected firmware versions include 2.5.1.8, 2.5.0.25, 2.5.0.24, and 2.4.1.19. The vulnerability arises because an API account and password are embedded in the firmware image and...
CVE-2020-28329
Barco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is discoverable by inspecting the firmware image. A malicious actor could use this password to access authenticated, administrative functions in the API. Affected Versions: 2.5.1.8, 2.5.0.25, 2.5.0.24, 2.4.1.19...
U.S. Dept Of Defense: hardcoded password stored in javascript of https://████.mil
Summary: I have discovered a cleartext password stored within a javascript. This password allows me to authentication to https://█████.mil. Description: I have discovered a cleartext password stored within a javascript. This password allows me to authentication to https://███████.mil. To confirm...
ZTE Mobile Hotspot MS910S Backdoor / Hardcoded Password
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: ZTE mobile Hotspot MS910S vulnerable version: DLMF910SCNEUV1.00.01 fixed version: - CVE number: CVE-2019-3422 impact: High homepage:...
CVE-2019-20025
Certain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into a device running an affected release with a hardcoded username and password, aka a Static Credential Vulnerability. The vulnerability is due to an undocumented user account with manufacturer privileg...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...
Hardcoded credentials
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 contain a hardcoded password for the debian-sys-maint account (wbboEZ4BN3ssxAfM). CVE-2020-15322 is corroborated by multiple sources (NVD, Red Hat, CNVD, CVE records) as a vulnerability with a hardcoded credential, enabling unauthorized access over the n...
CVE-2020-15322
Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the debian-sys-maint account...
CVE-2020-12039: Use of Hard-coded Password
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration value...
CVE-2020-15347
The CVE concerns Zyxel CloudCNM SecuManager versions 3.1.0 and 3.1.1 where the axiros account uses a hardcoded password (q6xV4aW8bQ4cfD-b), enabling remote attackers to obtain full access to affected devices. Root cause: insufficient credential protection in the SecuManager software leads to cred...
PT-2020-6758 · Zyxel · Zyxel Cloudcnm Secumanager
Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue is related to insufficient protection of credentials in the Zyxel CloudCNM SecuManager software, which can allow a remote attacker to gain full access to devices o...
CVE-2020-3928
GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...
CVE-2020-3928
GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...
CVE-2020-3928 GeoVision Door Access Control Device - Hardcoded privileged password
GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices...
CVE-2020-3928
GeoVision Door Access Control device family is affected by CVE-2020-3928 due to a hardcoded root password shared across devices, enabling unauthorized access. The Hacker News report also notes additional issues tied to the same disclosures: hardcoded SSH private keys, unauthenticated access to de...
