Backdoor.Win32.DarkMoon.a Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/7361fe3620fb6e18467c8e15e224b0b8.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.DarkMoon.a Vulnerability: Weak Hardcoded Password Description: Dark Moon v1 client by...

CVE-2021-32454

SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password. An attacker with access to the device could modify these credentials, leaving the administrators of the device without access...

CVE-2021-32454 SITEL CAP/PRX hardcoded credentials

SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password. An attacker with access to the device could modify these credentials, leaving the administrators of the device without access...

CVE-2021-32454

The CVE-2021-32454 entry describes a vulnerability in SITEL CAP/PRX firmware version 5.2.01 where a hardcoded password is used. Affected component: SITEL CAP/PRX firmware 5.2.01. Root cause: hardcoded credentials that can be modified by an attacker with access to the device, potentially depriving...

PT-2021-19706

Name of the Vulnerable Software and Affected Versions: SITEL CAP/PRX firmware version 5.2.01 Description: The issue concerns the use of a hardcoded password in the firmware. An attacker with access to the device could modify these credentials, potentially leaving administrators without access to...

Edimax Technology wireless network camera trust management issue vulnerability

Edimax Technology wireless network camera is a network device from Edimax Technology, China. It provides a video recording feature. A trust management issue vulnerability exists in EDIMAX wireless network camera, which stems from the default administrator account and password being hardcoded...

PT-2021-9089

Name of the Vulnerable Software and Affected Versions Scytl sVote version 2.1 Description An issue was discovered due to the implementation of the database manager, allowing an attacker to access the OrientDB by providing admin as the admin password. A different password cannot be set because of...

CVE-2021-27172

An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh...

CVE-2021-27168

An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account...

CVE-2021-27168

CVE-2021-27168 affects FiberHome HG6245D devices via RP2613, where the rdsadmin account is exposed with a hardcoded password (6GFJdY4aAuUKJjdtSn7d). The issue enables potential unauthorized admin access over the network, with CVSS metrics indicating high confidentiality, integrity, and availabili...

CVE-2021-27172

The CVE-2021-27172 case concerns FiberHome HG6245D ONT routers (via RP2613). It relies on a hardcoded GEPON password for root stored in /etc/init.d/system-config.sh, enabling unauthorized root access. The NVD entry lists a CVSS3.1 base score of 9.8 (CRITICAL) with network attack vector and no aut...

PT-2021-17291

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D versions through RP2613 Description: An issue was discovered where a hardcoded GEPON password for the root user is defined inside the /etc/init.d/system-config.sh file. Recommendations: For FiberHome HG6245D versions through...

PT-2021-17287

Name of the Vulnerable Software and Affected Versions: FiberHome HG6245D devices through RP2613 Description: An issue was discovered on FiberHome HG6245D devices, where there is a hardcoded password 6GFJdY4aAuUKJjdtSn7d for the rdsadmin account. Recommendations: For FiberHome HG6245D devices...

CVE-2020-10539: Improper Authentication

An issue was discovered in Epikur before 20.1.1. The Epikur server contains the checkPasswort function that, upon user login, checks the submitted password against the user password's MD5 hash stored in the database. It is also compared to a second MD5 hash, which is the same for every user aka a...

Micro Focus UCMDB Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution', 'Description' = %q This module exploits two vulnerabilities, that...

Micro Focus UCMDB Remote Code Execution Exploit

This Metasploit module exploits two vulnerabilities, that when chained allow an attacker to achieve unauthenticated remote code execution in Micro Focus UCMDB. UCMDB included in versions 2020.05 and below of Operations Bridge Manager are affected, but this module can probably also be used to...

Backdoor.Win32.Wollf.c Hardcoded Backdoor Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/91c02a95839a76a5d2e335cded7112a9.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.c Vulnerability: Hardcoded Backdoor Password Description: The backdoor creates ...

Backdoor.Win32.Wollf.16 Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5f79b779acd4c9c75211835a2783bccb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.16 Vulnerability: Weak Hardcoded Password Description: Wollf.16 creates and run...

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 CVSS score 7.8,...

Secret Backdoor Account Found in Several Zyxel Firewall, VPN Products

Zyxel has released a patch to address a critical vulnerability in its firmware concerning a hardcoded, undocumented secret account that could be abused by an attacker to login with administrative privileges and compromise its networking devices. The flaw, tracked as CVE-2020-29583 CVSS score 7.8,...