Dell KACE K2000 Backdoor

The Dell KACE K2000 System Deployment Appliance contains a hidden administrator account that allow a remote attacker to take control of an affected device. OpenVAS Vulnerability Test $Id: gbdellkace2000backdoor.nasl 3117 2016-04-19 10:19:37Z benallard $ Dell KACE K2000 Backdoor Authors: Michael...

Quest / Dell KACE K2000 Systems Deployment Appliance (SDA) < 3.7 Hardcoded Credentials (HTTP)

The Quest / Dell KACE K2000 System Deployment Appliance SDA contains a hidden administrator account that allows a remote attacker to take control of an affected device. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Dell KACE K2000 Web Backdoor Account

Nessus was able to log into the remote Dell KACE K2000 system using a hidden account. The hidden account, 'kbox1248163264128256', also has administrator privileges. A remote, unauthenticated attacker could exploit this issue to gain administrative access to the K2000 device. After gaining...

Dell KACE K2000 Appliance contains multiple reflected cross-site scripting vulnerabilities

Overview The administrative web interface for the Dell KACE K2000 System Deployment Appliance contains multiple cross-site scripting vulnerabilities. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale operating systems deployment...

Dell KACE K2000 Appliance read-only database account allows account information disclosure

Overview A vulnerability in the database component of the Dell KACE K2000 Deployment Appliance may allow a remote attacker to read account information from an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale...

Dell KACE K2000 Appliance contains backdoor administrator account

Overview The Dell KACE K2000 System Deployment Appliance contains a hidden administrator account that could allow a remote attacker to take control of an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale operating...

Dell KACE K2000 Appliance database administration account allows arbitrary command execution

Overview The Dell KACE K2000 System Deployment Appliance contains a vulnerability that could allow a remote attacker to execute arbitrary commands on an affected device. Description The Dell KACE K2000 Deployment Appliance is an integrated systems provisioning product for large-scale operating...

Dell KACE K2000 Appliance Hidden CIFS Fileshare Information Disclosure

The remote Dell KACE K2000 appliance has an information disclosure vulnerability. A hidden, read-only share named 'peinst' is used to facilitate Windows deployments. This share is populated with pre- and post-installation tasks, as well as deployment bootfiles and media used for Windows network...

Dell KACE K2000 Web Detection

The web interface for a Dell KACE K2000 appliance was detected on the remote host. The K2000 is used to deploy operating system installations via the network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid53492; scriptversion"1.8"; scriptcvsdate"Date: 2020/01/22";...

CVE-2011-1672

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

Default credentials

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

CVE-2011-1672

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

CVE-2011-1672

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

CVE-2011-1672

Dell KACE K2000 Systems Deployment Appliance, versions 3.3.36822 and earlier, exposes a hidden CIFS share named 'peinst' that allows remote, unauthenticated attackers to read sensitive deployment data (unattend.xml and sysprep.inf), potentially exposing credentials. The vulnerability is documente...

Dell Kace K2000 Appliance unauthenticated access and information disclosure vulnerability

Overview Dell KACE K2000 Systems Deployment Appliance contains a hidden CIFS share that allows anonymous access. Description According to Dell KACE's knowledge base article: "The Dell KACE K2000 Systems Deployment Appliance version 3.3.36822 and earlier uses a read-only CIFS fileshare named...