PT-2020-14354

Name of the Vulnerable Software and Affected Versions Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description The issue concerns a hardcoded RSA SSH key for the root account, located within the /opt/axess chroot directory tree. Recommendations For versions 3.1.0 and 3.1.1, consider...

PT-2020-14351

Name of the Vulnerable Software and Affected Versions Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description The issue concerns a hardcoded RSA SSH key for the root account, which poses a security risk. Recommendations For versions 3.1.0 and 3.1.1, consider changing the root account...

PT-2020-12809

Name of the Vulnerable Software and Affected Versions Cellebrite UFED versions 5.0 through 7.29 Description The issue concerns the use of hardcoded RSA private keys for authentication to the ADB daemon on target devices. These extracted keys can potentially be used to compromise the integrity of...

Cellebrite Hardcoded ADB Authentication Keys

Vulnerability Details Affected Vendor: Cellebrite Affected Product: UFED Affected Version: 5.0 - 7.29 Platform: Embedded Windows CWE Classification: CWE-321: Use of hardcoded cryptographic keys CVE ID: CVE-2020-11723 2. Vulnerability Description Cellebrite UFED uses four hardcoded RSA private...

PT-2020-7543

Name of the Vulnerable Software and Affected Versions: QNAP VioCard 300 Description: The issue concerns hardcoded RSA private keys in the QNAP VioCard 300. This means that the device uses predefined, non-unique private keys for secure communication, which can be easily obtained by attackers. No...

CVE-2015-3960

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by...

PT-2015-6359

Name of the Vulnerable Software and Affected Versions MNS versions prior to 4.5.6 Description The issue concerns the use of hardcoded RSA private keys and certificates in the firmware of affected devices. This makes it easier for remote attackers to defeat cryptographic protection mechanisms for...

CVE-2015-3960: Undefined Security Weakness

The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum 6K and Magnum 10K switches uses hardcoded RSA private keys and certificates across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms for HTTPS sessions by...