Lucene search
+L

10453 matches found

CNNVD
CNNVD
•added 2022/08/28 12:00 a.m.•26 views

TOTOLINK A810R Trust Management Vulnerability

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A810R versions V4.1.2cu.5182B20201026 and V5.9c.4050B20190424, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

7.8CVSS7AI score0.00296EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/08/28 12:00 a.m.•24 views

TOTOLINK A800R Trust Management Vulnerability

The TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A800R version V4.1.2cu.5137B20200730, which originates from the inclusion of a hardcoded password for root in /etc/shadow.sample...

7.8CVSS7AI score0.00296EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/28 12:00 a.m.•21 views

PT-2022-23506 · Totolink · Totolink A950Rg

Name of the Vulnerable Software and Affected Versions: TOTOLINK A950RG version 4.1.2cu.5204 B20210112 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

7.8CVSS7.7AI score0.00296EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/08/28 12:00 a.m.•23 views

PT-2022-23509 · Totolink · Totolink A3000Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3000RU version 4.1.2cu.5185 B20201128 Description: A hardcoded password for the root user was found in the /etc/shadow.sample file. This issue allows unauthorized access to the device. Recommendations: For TOTOLINK A3000RU version...

7.8CVSS7.6AI score0.00296EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/08/28 12:00 a.m.•22 views

PT-2022-23508 · Totolink · Totolink A860R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A860R version 4.1.2cu.5182 B20201027 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

7.8CVSS7.6AI score0.00296EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/28 12:00 a.m.•7 views

CVE-2022-36614: Use of Hard-coded Credentials

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

7.8CVSS7.3AI score0.00296EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/28 12:00 a.m.•22 views

TOTOLINK A860R Trust Management Vulnerability

The TOTOLINK A860R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A860R version V4.1.2cu.5182B20201027, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

7.8CVSS7AI score0.00296EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/28 12:00 a.m.•25 views

PT-2022-23507 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: TOTOLINK N600R version 4.3.0cu.7647 B20210106 Description: The issue concerns a hardcoded password for the root user located at /etc/shadow.sample. This could potentially allow unauthorized access to the system. Recommendations: For TOTOLINK...

7.8CVSS7.6AI score0.00296EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/28 12:00 a.m.•6 views

CVE-2022-36610: Use of Hard-coded Credentials

TOTOLINK A720R V4.1.5cu.532B20210610 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

7.8CVSS7.3AI score0.00296EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/19 9:15 p.m.•18 views

CVE-2022-36170

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

8.8CVSS7.4AI score0.00971EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/08/19 9:15 p.m.•18 views

CVE-2022-36170

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

8.8CVSS5.9AI score0.00971EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/19 9:15 p.m.•33 views

CVE-2022-36170

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

8.8CVSS0.00971EPSS
SaveExploits1References2
Prion
Prion
•added 2022/08/19 9:15 p.m.•30 views

Hardcoded credentials

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

6.5CVSS8.8AI score0.00971EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/08/19 8:30 p.m.•39 views

CVE-2022-36170

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

9.1AI score0.00971EPSS
SaveExploits1References2
CVE
CVE
•added 2022/08/19 8:30 p.m.•77 views

CVE-2022-36170

MapGIS 10.5 Pro IGServer is affected by CVE-2022-36170 due to hardcoded credentials in the front-end, enabling privilege escalation and arbitrary file deletion. The NVD record lists CVSS 3.1 base score 8.8 (Network, Low attack complexity, Privileges required: Low, User interaction: None, Scope: U...

8.8CVSS8.8AI score0.00971EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
•added 2022/08/19 12:00 a.m.•49 views

Use of Hard-coded Credentials in AgileConfig.Client

Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...

9.8CVSS9.1AI score0.01522EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/19 12:00 a.m.•8 views

CVE-2022-36170: Use of Hard-coded Credentials

MapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of privileges and arbitrary file deletion...

8.8CVSS7.8AI score0.00971EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/19 12:00 a.m.•22 views

PT-2022-23241 · Unknown · Mapgis 10.5 Pro Igserver

Name of the Vulnerable Software and Affected Versions: MapGIS 10.5 Pro IGServer version 10.5 Description: The issue is related to hardcoded credentials in the front-end of the software, which can lead to escalation of privileges and arbitrary file deletion. Recommendations: For MapGIS 10.5 Pro...

8.8CVSS8.8AI score0.00971EPSS
SaveExploits1References5
NVD
NVD
•added 2022/08/18 11:15 p.m.•34 views

CVE-2022-35540

Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...

9.8CVSS0.01522EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/18 11:15 p.m.•12 views

CVE-2022-35540

Hardcoded JWT Secret in AgileConfig 1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access...

9.8CVSS7AI score0.01522EPSS
SaveExploits0References2
Rows per page
Query Builder