1026 matches found
CVE-2024-10025
The CVE describes a vulnerability in the .sdd files of SICK CLV6xx, Lector6xx and RFx6xx products where an attacker can read default passwords stored in plaintext in the code. Exploitation enables logging in as an “Authorized Client” if the customer did not change the default password, potentiall...
CVE-2024-35294
An unauthenticated remote attacker may use the devices traffic capture without authentication to grab plaintext administrative credentials...
Schneider Electric Series 700 访问控制错误漏洞
The Schneider Electric Series 700 is a series of power transfer switches from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric Series 700 version 0.1.17.8 and earlier, which stems from the fact that an attacker can use unauthenticated device traffi...
CVE-2024-8452
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...
CVE-2024-8452
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...
CVE-2024-8452 PLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentials
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...
CVE-2024-8452
CVE-2024-8452 affects PLANET Technology switch models where SNMPv3 authentication/encryption rely on obsolete algorithms, enabling potential exposure of plaintext SNMPv3 credentials. The vulnerability is rooted in the SNMPv3 service cryptographic choices and is described with a high impact to con...
PLANET switch devices 安全漏洞
PLANET switch devices are a series of switch devices from PLANET China. A security vulnerability exists in PLANET switch devices that stems from the fact that the SNMPv3 service only supports outdated authentication protocols and encryption protocols, allowing an attacker to potentially obtain...
PT-2024-39022 · Planet Technology · Planet Technology Switch
Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns the use of obsolete algorithms for authentication and encryption protocols in the SNMPv3 service, potentially allowing attackers to obtain plainte...
PT-2024-39028 · Planet Technology · Planet Technology Switch
Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns certain switch models from PLANET Technology that store SNMPv3 users' passwords in plaintext within the configuration files. This allows remote...
PT-2024-39025 · Planet Technology · Planet Technology Devices
Name of the Vulnerable Software and Affected Versions: PLANET Technology devices affected versions not specified Description: The swctrl service is used to detect and remotely manage PLANET Technology devices. For certain switch models, the authentication tokens used during communication with thi...
MOXA MXview One Series 安全漏洞
MOXA MXview One Series is a series of network management software from China-based MOXA. A security vulnerability exists in MOXA MXview One Series that originates from storing credentials in plaintext...
Kastle Access Control System 安全漏洞
Kastle Access Control System is an access control system from Kastle USA. A security vulnerability exists in Kastle Access Control System versions prior to 20240501 that stems from storing machine credentials in plaintext, which allows an attacker to access sensitive information...
CVE-2024-8777
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...
CVE-2024-8777
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...
CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...
CVE-2024-8777 The SYSCOM Group OMFLOW - Information Leakage
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...
CVE-2024-8777
CVE-2024-8777 concerns OMFLOW from The SYSCOM Group, where an information leakage vulnerability could allow unauthorized remote attackers to read arbitrary system configurations. The issue may be exposed via network access with low attack complexity and no privileges required, with the impact on ...
PT-2024-39243 · Syscom · Omflow
Name of the Vulnerable Software and Affected Versions: OMFLOW from The SYSCOM Group affected versions not specified Description: The issue allows unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials...