PT-2025-44802

Name of the Vulnerable Software and Affected Versions Deck Mate 2 affected versions not specified Description Deck Mate 2 is shipped with pre-set, unchanging credentials for both the root shell and the web user interface. Multiple management services, including SSH, HTTP, Telnet, SMB, and X11, ar...

Keycloak Management Software Pre-set User Account Access

The vulnerability of the Keycloak identity and access management software relates to the use of pre-set user credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MicroLogix 1400 PLC Resource Management Error

The vulnerability of MicroLogix 1400 programmable logic controllers’ microprogramming software is related to resource management errors. Exploiting this vulnerability can allow an attacker to gain access to the device by using pre-set credentials...

Nexx Garage Door Controllers Plugin Unauthorized Access

The vulnerability of microprogrammed software in Nexx Garage Door Controllers NXG-100B, NXG-200, Nexx Smart Plugs NXPG-100W, and Nexx Smart Alarms NXAL-100 lies in the use of pre-set credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the MQ Telemetry...

InHand Networks InRouter302 Arbitrary Action

The vulnerability of InHand Networks InRouter302 microprogramming software lies in the use of pre-set credentials. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

Infiray IRAY-A8Z3 Privilege Escalation

The vulnerability of the /usr/local/sbin/webproject/setparam.cgi file in the Infiray IRAY-A8Z3 thermal imager software is related to the use of pre-set user credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

PROFIBUS-Ethernet gateway Softing AG FG-100 PB Root Privilege Bypass

The vulnerability of the PROFIBUS-Ethernet gateway Softing AG FG-100 PB lies in the use of pre-set credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the device with root privileges through a Telnet connection...

Infinia Hawkeye 4 gamma camera Credential Access

The vulnerability of the microprogrammed software of the Infinia Hawkeye 4 gamma camera is related to the use of pre-set credentials. Exploiting this vulnerability can allow a remote attacker to gain access to the device...

NETGEAR Arlo Credentials Access

The vulnerability of the microprogramming software used in NETGEAR Arlo base stations and wireless video surveillance cameras like NETGEAR Arlo Q and NETGEAR Arlo Q Plus lies in the use of preset login credentials password “12345678”. Exploiting this vulnerability could allow a malicious actor to...

Zyxel Wi-Fi transponders Pre-set Credentials Interception

The vulnerability of the Zyxel Wi-Fi signal relay stems from the use of pre-set account credentials “root” and “admin” default password: 1234 during Telnet protocol connections. Exploiting this vulnerability allows a remote attacker to intercept DNS requests by reconfiguring the built-in...