CVE-2021-47707 COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel...

CVE-2023-6928

EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in remote password attacks to gain full control of the system...

CVE-2023-6928

Summary (supported by provided documents): CVE-2023-6928 affects EuroTel ETL3100 transmitter versions v01c01 and v01x37. The vulnerability is an improper restriction of excessive authentication attempts (CWE-307), enabling a remote attacker to perform brute-force-like password guessing for admini...

CVE-2023-5754

CVE-2023-5754 affects Sielco PolyEco1000 family (and related PolyEco models) with a weak set of default administrative credentials that can be guessed remotely, enabling full system control. Affected versions include PolyEco1000 CPUs 2.0.6, 1.9.4, 1.9.3; PolyEco500 1.7.0; PolyEco300 2.0.2, 2.0.0....

PT-2008-5562 · Microsoft · Internet Information Services

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Information Services IIS affected versions not specified Description: A certain ActiveX control in iisext.dll allows remote attackers to set a password via a string argument to the SetPassword method. However, this issue...