CVE-2018-21137

The CVE-2018-21137 entry applies to NETGEAR D3600 and D6000 devices, with versions before 1.0.0.76 affected by a hardcoded password. Connected documents corroborate the affected models and version range, and NVD/metrics indicate a high to critical impact (network access, no authentication, and pa...

CVE-2019-20656

Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.24, JR6150 before 1.0.1.24, R6120 before 1.0.0.48, R6220 before 1.1.0.86, R6230 before...

CVE-2019-20656

Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.24, JR6150 before 1.0.1.24, R6120 before 1.0.0.48, R6220 before 1.1.0.86, R6230 before...

CVE-2019-20656

The CVE-2019-20656 issue is a Hardcoded password vulnerability affecting multiple NETGEAR devices (D6200 < 1.1.00.36; D7000 < 1.0.1.74; PR2000 < 1.0.0.30; R6020 < 1.0.0.42; R6080 < 1.0.0.42; R6050 < 1.0.1.24; JR6150 < 1.0.1.24; R6120 < 1.0.0.48; R6220 < 1.1.0.86; R6230 ...

CVE-2019-20656

Certain NETGEAR devices are affected by a hardcoded password. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.74, PR2000 before 1.0.0.30, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.24, JR6150 before 1.0.1.24, R6120 before 1.0.0.48, R6220 before 1.1.0.86, R6230 before...

Hardcoded credentials

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the service user account. The product contains a hard-coded password for thi...

CVE-2019-14309

Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders...

CVE-2014-0234: Initialization of a Resource with an Insecure Default

The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

CVE-2020-8001

The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...

CVE-2020-8001

The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

Hardcoded credentials

The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

CVE-2020-8000

Intellian Aptus Web 1.24 contains a hardcoded intellian account password (12345678). This yields a high-severity, network-exposed risk with potential full impact on confidentiality, integrity, and availability per CVSS 3.1/BASE. The connected sources confirm the issue but do not provide remediati...

CVE-2020-8001

The CVE-2020-8001 entry concerns the Intellian Aptus Android app (1.0.2) that hardcodes the masteruser FTP password, intellian. This creates a credential exposure allowing unauthorized FTP access within the app’s functionality, consistent with the reported CVSS base metrics (Android app, hardcode...

CVE-2020-8001

The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account...

CVE-2020-7233: Insufficiently Protected Credentials

KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOORNAME variable in the BCLogon.swf file...

Cisco Data Center Network Manager serverinfo Hardcoded Password Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of web requests. The system contains a hard-cod...

CVE-2019-19021

TitanHQ WebTitan before 5.18 is affected by an authentication flaw involving a hidden, hard-coded administrator account. The issue enables anyone to log in with this account and obtain administrator privileges through the web administration interface. Root cause details are not elaborated beyond ...