Hardcoded credentials

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

CVE-2019-6548

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

CVE-2019-6548

GE Communicator is affected by CVE-2019-6548: all versions before 4.0.517 contain two backdoor accounts with hardcoded credentials that could allow control over the database. Impact is stated as high (C/H/I/H/A/H) with potential remote exploitation per public advisories. The remediation is to upg...

PT-2019-18160 · Ge · Ge Communicator

Name of the Vulnerable Software and Affected Versions: GE Communicator versions prior to 4.0.517 Description: The issue concerns the presence of two backdoor accounts with hardcoded credentials in the software, potentially allowing control over the database. However, if the default Windows firewa...

Emerson Multiple RTUs Hardcoded Credentials Storage

Binary data 720176.prm...

Schneider Electric Trio J-Series License Free Ethernet Radio 3.6.0 <= 3.6.3 Hardcoded Encryption Key

Binary data 720035.prm...

Yokogawa STARDOM Controllers < R4.02 Hardcoded Credentials

Binary data 720135.prm...

GE Multilink Switches < 5.5.0 Hardcoded Credentials

Binary data 720079.prm...

GE Multilink Swtiches Hardcoded Encryption Key

Binary data 720053.prm...

Schneider Electric PowerLogic PM8ECC < 2.651 Hardcoded Credentials

Binary data 720085.prm...

Schneider Electric Magelis XBT HMI Hardcoded Configuration Password

Binary data 720236.prm...

Schneider Electric ETG3000 FactoryCast HMI Gateway <= 1.60 IR 04 Hardcoded Credentials

Binary data 720157.prm...

Yokogawa STARDOM Controllers <= R4.10 Hardcoded Credentials

Binary data 720137.prm...

Schneider Electric Modicon Multiple Controllers Hardcoded Credentials

Binary data 720149.prm...

Schneider Electric Quantum Ethernet Module Multiple Versions Hardcoded Passwords

Binary data 720009.prm...

Hardcoded credentials

A vulnerability in the Trusted Platform Module TPM functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device. The...

Blue Angel Software Suite - Command Execution

Blue Angel Software Suite - Command Execution Exploit Title: Blue Angel Software Suite - Authenticated Command Execution Google Dork: N/A Date: 02/05/2019 Exploit Author: Paolo Serracino Vendor Homepage: http://www.5vtechnologies.com Software Link: N/A Version: All Tested on: Embedded Linux OS CV...

CVE-2017-18373

The Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username user3 and and a long password consisting of a...

CVE-2017-18371

The ZyXEL P660HN-T1A v2 TCLinux Fw 7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including two hardcoded service accounts: one with the username true and password true, and another with the username supervisor and password zyad1234. These accounts can b...

Command injection

The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40ULM.0b31 router distributed by TrueOnline has two user accounts with default passwords, including a hardcoded service account with the username true and password true. These accounts can be used to login to the web interface, exploit...