CVE-2022-24693

CVE-2022-24693 説明 QRTB 2.7.8 までのファームウェアを搭載した Baicells Nova436Q および Neutrino 430 デバイスには、簡単に発見できるハードコードされた認証情報が含まれており、リモートの攻撃者が ssh で認証するために使用できます。認証情報はファームウェア内に保存され、crypt 関数で暗号化されています。 CVSS スコア CVSS 9.8 脆弱性タイプ CWE-284: 不適切なアクセス制御 製品ベンダー BaiCells 影響を受ける製品コードベース NOVA436Q - QRTB 2.7.8 2.9.x...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ 開示状況: 本リポジトリのすべての調査結果は、 2026年5月〜6月の間にHPE Networkingバグ報奨金プログラムBugcrowdへ提出されました。 6件の提出のうち5件は、提出された証拠の技術的な整合確認が行われないまま、 トリアージ段階で「該当なしNot Applicable」とクローズされました。 2026年6月時点で修正は一切リリースされていません。 完全なライトアップのソース https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/...

CVE-2020-17456

설명 2020년 8월 21일, seown SLC 130 라우터에 인증 RCE 취약점이 존재하는 것으로 밝혀졌습니다. 취약점 번호는 cve-2020-17456입니다. 이 취약점은 라우터 웹 서비스 진단 기능의 ping 명령어 삽입으로 인해 발생합니다. 여러 그룹의 하드코딩된 자격 증명과 결합하여 인증되지 않은 공격자가 인증을 우회하고 대상 장치에서 루트 권한으로 임의의 명령을 실행할 수 있습니다. 사용 방법 python CVE-2020-17456.py http://192.168.1.1 id 예시: 기타 SLC-130 및...

CVE-2026-92928: Use of Hard-coded Credentials

OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 contains a hardcoded, undocumented recovery account with a shared credential that cannot be changed, disabled, or rotated. An unauthenticated remote attacker can use the account to authenticate to the password-reset workflow. The account...

CVE-2026-86555: Use of Hard-coded Credentials

The ZTE SmartLife application has a hardcoded key. The key used to decrypt account server information is stored in plaintext in the code. Once the key is obtained, the server information can be decrypted, thus exposing it...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

EUVD-2026-83416

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-84034

IBM Guardium Data Protection 12.2 is affected by a hardcoded credentials vulnerability (CWE-798) in the hardware_assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially gaining unauthorized access to the internal database and compromi...

CVE-2026-86689

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-77960

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

EUVD-2026-83139

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-77960 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

EUVD-2026-83133

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520 Use of Hard-coded Credentials in Bransys ELD

Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...

CVE-2026-86520

Bransys ELD ships with hardcoded MQTT credentials that grant unauthenticated read access to real-time data for every active device across a subset of carriers connected to the affected MQTT broker. The flaw is rated HIGH with a CVSS 3.1 base score of 7.5 and a CVSS 4.0 score of 8.7, reflecting ne...

CVE-2026-84034: Use of Hard-coded Credentials

IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulnerability in the hardwareassess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, potentially resulting in unauthorized access to the internal database and compromise o...

CVE-2026-79396

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentials in unencrypted plaintext within bin/config.xml and compiled into the Sofia executable, allowing remote attackers to gain full administrative control over...