Schneider Electric Easergy Relay Protection Unauthorized Access

The vulnerability of microprogrammed software in Schneider Electric Easergy relay protection and control devices is related to the use of pre-installed account data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

SmartFabric OS10 Privilege Escalation

The vulnerability of the SmartFabric OS10 network operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker to increase their privileges...

SCKU Dome Privilege Escalation

The vulnerability of the SCKU Dome software is related to the presence of pre-installed account data. Exploiting this vulnerability can allow a remote attacker to enhance their privileges within the system and gain access to protected information...

SolarWinds IT infrastructure management Information Disclosure

The vulnerability of SolarWinds IT infrastructure management software’s Web Help Desk component is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to disclose and modify the protected information...

mySCADA myPRO Account Data Access

The vulnerability of the mySCADA myPRO industrial process visualization and control system is related to the use of pre-set account data. Exploiting this vulnerability can allow a malicious actor to gain access to the system remotely...

TOTOLINK CP900L Telnet Root Privilege

The vulnerability of the /webcste/cgi-bin/product.ini component of the Telnet service in the TOTOLINK CP900L wireless access point software is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain root privileges and access the syst...

Vinchan Backup & Recovery Privilege Escalation

The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root-level by connecting with the default SSH account...

Corporate Access Management Pre-installed User Accounts Information Disclosure

The vulnerability of the software for managing and controlling access to corporate resources and applications of IBM Security Verify Governance is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

Fortinet FortiClient Pre-installed Account Bypass

The vulnerability of the Fortinet FortiClient security device for Windows relates to the use of pre-installed user accounts. Exploiting this vulnerability could allow a hacker to circumvent security restrictions...

Yokogawa Software Pre-installed Account Data Access

The vulnerability of Yokogawa software products is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

DSR-500N Router Buffer Overflow

The vulnerability of the /etc/passwd component in the D-Link DSR-500N router’s microprogramming system is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor to gain access to the device’s basic embedded Linux operating system...

KR C4 production automation

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the system...

KR C4 production automation

The vulnerability of the KR C4 production automation control system and the KSS operating system is related to the use of pre-installed account data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to the vulnerable systems...

Microsoft Windows Defender Privilege Escalation

The vulnerability of Microsoft Windows Defender operating system is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow attackers to increase their privileges...

BARS.Web-Sudy Platform Pre-installed Account Access

The vulnerability of the BARS.Web-Sudy platform is related to the use of pre-installed user accounts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected information...

Cisco Prime Collaboration Provisioning Access Privilege

The vulnerability of the Cisco Prime Collaboration Provisioning software installation component for centralized product management involves the use of pre-installed user accounts. Exploiting this vulnerability could allow an attacker to gain access to the administrative web interface with...

Juniper Networks’ Junos Space MySQL Server Privilege Escalation

The vulnerability of the MySQL server of the Juniper Networks Junos Space network resource management platform is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow a malicious actor to gain access with administrator privileges remotely...

DTISQLInstaller.exe Gain Access

The vulnerability of the DTISQLInstaller.exe executable file of the software package for interacting with QuicDoc and Office Therapy clients is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the softwar...

GigaOrion GigaLynx Switching Software Privilege Escalation

The vulnerability of microprogrammed switching equipment such as GigaOrion and GigaLynx, as well as external switching modules like ApexLynx, ApexOrion, and StrataLink, is related to the use of a pre-installed root account. Exploiting this vulnerability allows an attacker operating remotely to ga...

GigaOrion Switching Pre-installed Account Privilege Escalation

The vulnerability of microprogrammed switching equipment such as GigaOrion, GigaLynx, GigaPlus, and GigaPro, as well as external switching modules like Apex, ApexLynx, ApexOrion, StrataLink, and StrataPro, stems from the use of a pre-installed root account password, which is stored publicly in th...