8925 matches found
Default credentials
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses credentials for the smb functionality of the device. Usernames and passwords for all smb users are revealed in plaintext on the smbserver.asp page...
Default credentials
Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...
CVE-2021-45077
CVE-2021-45077 affects Netgear Nighthawk R6700 (firmware 1.0.4.120). The device stores usernames and passwords for its services in plaintext in the primary configuration file; CNVD-2022-02652 notes an encryption vulnerability due to failure to encrypt account information, with plaintext credentia...
CVE-2021-45077
Netgear Nighthawk R6700 version 1.0.4.120 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...
CVE-2021-20171
Netgear RAX43 version 1.0.3.96 stores sensitive information in plaintext. All usernames and passwords for the device's associated services are stored in plaintext on the device. For example, the admin password is stored in plaintext in the primary configuration file on the device...
CVE-2021-20171
Netgear RAX43 firmware 1.0.3.96 stores usernames and passwords for device services in plaintext on the device, with an example that the admin password is stored in plaintext in the primary configuration file. The Connected documents corroborate this plaintext credential storage. The exact root ca...
CVE-2021-20163
CVE-2021-20163 affects Trendnet AC2600 TEW-827DRU (firmware 2.08B01). The issue is an information disclosure where usernames and passwords for all FTP users are exposed in plaintext on the ftpserver.asp page of the router’s FTP/web interface. The connected documents confirm the affected product a...
CVE-2021-20162
Trendnet AC2600 TEW-827DRU version 2.08B01 stores credentials in plaintext. Usernames and passwords are stored in plaintext in the config files on the device. For example, /etc/config/cameo contains the admin password in plaintext...
CVE-2021-20162
The CVE-2021-20162 entries describe a vulnerability in Trendnet AC2600 TEW-827DRU (v2.08B01) where credentials are stored in plaintext in device configuration files. Specifically, usernames and passwords are stored in plaintext on the device, with an example path: /etc/config/cameo containing the...
Netgear RAX43 安全漏洞
The Netgear RAX43 is a wireless router from Netgear USA. A security vulnerability exists in the Netgear RAX43 that stems from storing sensitive information in plaintext. All usernames and passwords for device-related services are stored on the device in plaintext. No details of the vulnerability...
Netgear Nighthawk R6700 加密问题漏洞
The Netgear Nighthawk R6700 is a wireless router from Netgear, Inc. An encryption vulnerability exists in the Netgear Nighthawk R6700, which stems from the product's failure to encrypt account information. An attacker could obtain plaintext account information in the Zhu configuration file throug...
EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2922)
According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...
Netgear RAX43 安全漏洞
A security vulnerability exists in the Netgear RAX43, a wireless router from Netgear, which stems from the non-use of secure communication with the web interface. By default, all communication to and from the device is sent over HTTP, which can result in potentially sensitive information such as...
EulerOS 2.0 SP9 : libgcrypt (EulerOS-SA-2021-2914)
According to the versions of the libgcrypt package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during interaction between two cryptographic libraries...
Trendnet AC2600 安全漏洞
Trendnet AC2600 TEW-827DRU is a wireless router.A security vulnerability exists in Trendnet AC2600 TEW-827DRU version 2.08B01, which could be exploited by an attacker to cause plaintext transmission of sensitive information e.g., passwords...
Trendnet AC2600 安全漏洞
Trendnet AC2600 TEW-827DRU is a wireless router.The Trendnet AC2600 TEW-827DRU has a security vulnerability that could be exploited by an attacker to store user names and passwords in plaintext in the device's configuration file...
Zyxel NBG6604 信息泄露漏洞
The Zyxel NBG6604 is a dual-band wireless router from China-based Hopkins Technology Zyxel. The Zyxel NBG6604 suffers from an information disclosure vulnerability that originates from the plaintext storage of sensitive information in the Zyxel NBG6604 firmware, which can be exploited by an...
Multiple vulnerabilities in IDEC PLCs
Overview Multiple PLCs provided by IDEC Corporation contain multiple vulnerabilities listed below. Unprotected transport of credentials CWE-523 - CVE-2021-37400 Plaintext storage of a password CWE-256 - CVE-2021-37401 Unprotected transport of credentials CWE-523 - CVE-2021-20826 Plaintext storage...
Netgear NETGEAR 信任管理问题漏洞
The NETGEAR xr1000 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR XR1000 device suffers from a security vulnerability that stems from the fact that NETGEAR XR1000 devices prior to 1.0.0.58 are subject to...
CVE-2021-20827
Plaintext storage of a password vulnerability in IDEC PLCs FC6A Series MICROSmart All-in-One CPU module v2.32 and earlier, FC6A Series MICROSmart Plus CPU module v1.91 and earlier, WindLDR v8.19.1 and earlier, WindEDIT Lite v1.3.1 and earlier, and Data File Manager v2.12.1 and earlier allows an...