10453 matches found
CVE-2024-50692
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter. It is also possible to impersonate the broker, because TLS is not used to identify the real MQTT broker. This means that MQTT...
CVE-2024-50690
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates...
CVE-2024-50690
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates...
PT-2025-2884 · Sungrow · Sungrow Winet-Sv200
Name of the Vulnerable Software and Affected Versions: SunGrow WiNet-SV200 versions 0.001.00.P027 and earlier Description: The issue concerns hardcoded MQTT credentials in the affected software, allowing an attacker to send arbitrary commands to any inverter. Additionally, the lack of TLS to...
CVE-2024-50690
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates...
CVE-2024-50690: Use of Hard-coded Credentials
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates...
CVE-2024-50692
The SunGrow WiNet-SV200 LAN communication module (version 0.001.00.P027 and earlier) is vulnerable to a trust management issue due to hardcoded MQTT credentials . An attacker can exploit this to send arbitrary commands to any inverter. Furthermore, because the system does not use TLS to identify ...
CVE-2024-50690
SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates...
CVE-2024-50690
The SunGrow WiNet-S LAN communication module, specifically versions V200.001.00.P027 and earlier, contains a hardcoded password . An attacker can exploit this vulnerability to decrypt all firmware updates . As a temporary workaround, users should restrict access to firmware updates until a patch ...
PT-2025-2883 · Sungrow · Sungrow Winet-Sv200
Name of the Vulnerable Software and Affected Versions: SunGrow WiNet-SV200 versions 0.001.00.P027 and earlier Description: The issue concerns a hardcoded password in the affected versions. This password can be used to decrypt all firmware updates. Recommendations: For SunGrow WiNet-SV200 versions...
Exploit for Server-Side Request Forgery in Havocframework Havoc
Havoc-C2-RCE CVE-2024-41570 This is a Chained RCE CVE-2024-...
CVE-2024-53683: Exposure of Sensitive System Information to an Unauthorized Control Sphere
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...
PT-2025-2978
Name of the Vulnerable Software and Affected Versions Affected software affected versions not specified Description A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of t...
CVE-2024-48126
HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access...
CVE-2024-48126
HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access...
CVE-2024-48126: Use of Hard-coded Credentials
HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access...
CVE-2024-48126
HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access...
CVE-2024-48126
The Smiths Detection HI-SCAN 6040i Hitrax HX-03-19-I , an entry-level X-ray equipment electronic component, contains hardcoded credentials for vendor support and service access. This vulnerability allows unauthorized access to these restricted service functions. As a remediation, it is recommende...
PT-2025-2792 · Unknown · Hi-Scan 6040I
Name of the Vulnerable Software and Affected Versions: HI-SCAN 6040i Hitrax HX-03-19-I Description: The issue concerns hardcoded credentials in the system, which could allow unauthorized access to vendor support and service access. Recommendations: For HI-SCAN 6040i Hitrax HX-03-19-I, consider...