CVE-2017-6689

CVE-2017-6689 is a Cisco Elastic Services Controller vulnerability affecting the ConfD CLI, caused by a default, hard-coded admin password. An authenticated remote attacker could log in as admin (SSH port 2024) on affected systems. Known affected release: 2.2(9.76). Cisco advisory notes there are...

PT-2017-17241

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Staging Server version 21.0.0 Description A vulnerability exists due to insecure default credentials, allowing an authenticated, remote attacker with access to the management network to log in as an admin user of...

PT-2017-17242

Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Element Manager version 21.0.0 Description A vulnerability exists that could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device...

PT-2017-17244

Name of the Vulnerable Software and Affected Versions Cisco Elastic Services Controllers version 2.29.76 Description A vulnerability in the ConfD CLI could allow an authenticated, remote attacker to log in to an affected system as the admin user. This issue is related to insecure default...

CVE-2017-6685: Initialization of a Resource with an Insecure Default

A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...

CVE-2017-6686: Initialization of a Resource with an Insecure Default

A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known...

CVE-2017-6684: Initialization of a Resource with an Insecure Default

A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the Linux admin user, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76651. Known Affected Releases: 21.0.0...

Synology NAS servers contain insecure default credentials

Overview Synology NAS servers DS107, DS116, and DS213, use default credentials. Description CWE-255: Credentials Management - CVE-2016-6554Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials o...

Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability (cisco-sa-20160302-n3k)

A vulnerability in Cisco NX-OS Software running on Cisco Nexus 3000 Series Switches and Cisco Nexus 3500 Platform Switches could allow an unauthenticated, remote attacker to log in to the device with the privileges of the root user with bash shell access. Copyright C 2016 Greenbone Networks GmbH...