10457 matches found
CVE-2024-42637
The H3C R3010 wireless router, specifically version v100R002L02 , is susceptible to a hardcoded password vulnerability located in the /etc/shadow file. This flaw allows an unauthenticated attacker to gain root access to the device. To mitigate this risk, it is recommended to change the hardcoded ...
CVE-2024-42637
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639: Use of Hard-coded Password
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42638
H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
H3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows attackers to log in as root...
CVE-2024-42639
The H3C GR1100-P high-performance enterprise router, specifically version v100R009 , contains a security vulnerability due to a hardcoded password in the /etc/shadow file. This flaw allows an attacker to gain unauthorized access by logging in as the root user. To mitigate this risk, it is recomme...
PT-2024-30088 · H3C · H3C Magic B1St
Name of the Vulnerable Software and Affected Versions: H3C Magic B1ST version v100R012 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue affects the H3C Magic B1ST device, potentially allowing unauthorized access...
CVE-2024-42637: Use of Hard-coded Credentials
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...
PT-2024-30087 · H3C · H3C R3010
Name of the Vulnerable Software and Affected Versions: H3C R3010 version v100R002L02 Description: A hardcoded password vulnerability was discovered in /etc/shadow, allowing attackers to log in as root. This issue affects the H3C R3010 device, potentially allowing unauthorized access...
CVE-2024-31798
Identical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P allows an attacker with physical access to retrieve the root password for all similar devices...
PT-2024-24207
Name of the Vulnerable Software and Affected Versions GNCC's GC2 Indoor Security Camera 1080P affected versions not specified Description The issue concerns a hardcoded root password that is identical for all devices in GNCC's GC2 Indoor Security Camera 1080P. This allows an attacker with physica...
CVE-2023-20512
A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage...
CVE-2023-20512
CVE-2023-20512 describes a hardcoded AES key in PMFW that could allow a privileged attacker to access the key and potentially leak internal debug information. Multiple connected sources corroborate PMFW as the affected component and the root cause as a hardcoded key, leading to unauthorized acces...
PT-2024-11949 · Pmfw · Pmfw
Name of the Vulnerable Software and Affected Versions: PMFW affected versions not specified Description: A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage. Recommendations: At the moment, there is...
D-Link DAP-1360 Rev. F / DAP-2020 Rev. A2 Devices Multiple Vulnerabilities
D-Link DAP-1360 Rev. F and DAP-2020 Rev. A2 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All
Security researcher Bill Demirkapi found more than 15,000 hardcoded secrets and 66,000 vulnerable websites—all by searching overlooked data sources...
