8305 matches found
PT-2023-25650 · Prolion · Prolion Cryptospike
Name of the Vulnerable Software and Affected Versions: ProLion CryptoSpike version 3.0.15P2 Description: A hard-coded cryptographic private key used to sign JWT authentication tokens allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
Hardcoded credentials
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
PT-2023-7601 · Sonicwall · Sonicwall Wan Acceleration (Wxa) 5000 Virtual Appliance
Name of the Vulnerable Software and Affected Versions: SonicWall WAN Acceleration WXA 5000 Virtual Appliance affected versions not specified Description: The issue is related to the use of hardcoded credentials in the virtual device management service. This could allow a remote attacker to bypass...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 is affected by a hardcoded cryptographic key. The available connected sources confirm the issue exists in version 3.8 and describe the risk as potentially enabling unauthorized access or decryption of sensitive data. No details on exploit vectors, affected configurations...
PT-2023-27368 · Netscout · Netscout Ngeniuspulse
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusPULSE version 3.8 Description: The issue is related to a hardcoded cryptographic key in the software. This could potentially allow unauthorized access or decryption of sensitive data. Recommendations: For NETSCOUT nGeniusPULSE...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
PT-2023-24338
Name of the Vulnerable Software and Affected Versions Supermicro X11 and M11 based devices versions through 3.17.02 Description The configuration functionality in the Intelligent Platform Management Interface IPMI baseboard management controller BMC implementation allows remote authenticated user...
CVE-2023-40464
Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server...
Hardcoded credentials
Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server...
CVE-2023-40464 Use of hardcoded certificate and private key
Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server...
CVE-2023-40464 Use of hardcoded certificate and private key
Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items could potentially perform a man in the middle attack between the ACEManager client and ACEManager server...
Hardcoded credentials
EzViz Studio v2.2.0 is vulnerable to DLL hijacking...
Hardcoded credentials
The password for access to the debugging console of the PoWer Controller chip PWC of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerability found on Škoda Superb III 3V3 - 2.0 TD...
CVE-2023-28895
The CVE-2023-28895 entry concerns Škoda MIB3 infotainment’s PoWer Controller (PWC) with a hard-coded password in the firmware. This allows an attacker with physical access to gain full control of the PWC chip on Škoda Superb III (3V3) 2.0 TDI (2022). Connected documents confirm the hardware/softw...
CVE-2023-23324
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account...