903 matches found
CVE-2017-17878
CVE-2017-17878 affects Valve Steam Link build 643. The root password handling truncates passwords longer than 8 characters due to the default DES algorithm (CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="des"). The issue is documented across multiple sources (NVD entry, Red Hat CVEs, and related disclosures...
CVE-2017-17107
Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operating system's setup renders this password unchangeable and it can be used to access the device via a TELNET session...
The vulnerability of D-Link DWR-932B router’s microprogramming software lies in the use of pre-installed accounts, allowing a hacker to gain access to the device with root privileges.
The vulnerability of the D-Link DWR-932B router’s microprogramming software lies in the use of pre-set accounts “admin” and “root”, with passwords “admin” and “1234” respectively. Exploiting this vulnerability allows a malicious actor to gain access to the device with root privileges via Telnet o...
Coredy CX-E120 Repeater Multiple Vulnerabilities
Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Coredy CX-E120 Repeater. The Coredy CX-E120 WiFi Range Extender is “a network device with multifunction, which can be using for increasing the distance of a WiFi network by boosting the existing WiFi signal an...
VulnCheck KEV: CVE-2016-10401
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root access if a non-root account password is known or a non-root default account exists within an ISP's deployment of these devices...
The vulnerability of microprogrammed switching equipment such as GigaOrion, GigaLynx, GigaPlus, and GigaPro, as well as external switching modules like Apex, ApexLynx, ApexOrion, StrataLink, and StrataPro, stems from the use of pre-installed user accounts. This allows attackers to gain access to the embedded operating system with administrator privileges.
The vulnerability of microprogrammed switching equipment such as GigaOrion, GigaLynx, GigaPlus, and GigaPro, as well as external switching modules like Apex, ApexLynx, ApexOrion, StrataLink, and StrataPro, stems from the use of a pre-installed root account password, which is stored publicly in th...
Sophos UTM Elevation of Privilege Vulnerability
Sophos UTM is the ultimate security solution package from Sophos. An elevation of privilege vulnerability exists in Sophos UTM. A local user with "logged in user" privileges can set the root password using insecure directory permissions to gain elevated privileges on the target system...
CVE-2016-4996
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...
Default credentials
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...
CVE-2016-4996
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root password in plaintext in the system journal when used to log in, which allows local users with access to the system journal to obtain the root password by reading the system journal, ...
PT-2017-8642 · Foreman · Foreman
Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 6.2 Description: The issue allows local users with access to the system journal to obtain the root password by reading the system journal or by clicking Logs on the console, when the ssh service has been enabled on...
CVE-2016-5411
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
CVE-2016-5411
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
Design/Logic Flaw
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
CVE-2016-5411
/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer QCI before 1.0 GA is created world readable and contains the root password of the deployed system...
Aerohive HiveOS 5.1r5 < 6.1r5 - Remote Code Execution
!/usr/bin/python3 TARGET: AeroHive AP340 HiveOS $cmd"; die; ?" URL of the login page where we will inject our PHP command exec code so it poisons the log file posturl= "/login.php5?version=6.1r2" postfields = "loginauth" : "1", "miniHiveUI" : "1", "userName" : payloadinject, "password" : "1234"...
CVE-2016-9196
A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced...
Backdoor Vulnerability in Wireless IP Camera (P2P) WIFICAM
Wireless IP Camera P2P WIFICAM is a wireless IP camera. Wireless IP Camera P2P WIFICAM is vulnerable to a backdoor vulnerability. It runs Telnet by default, which can be accessed by an attacker logging in with the following password: root:$1$ybdHbPDn$ii9aEIFNiolBbM9QxW9mr0:0:0::/root:/bin/sh...
How to resolve "Unexpected inconsistency: Run fsck manually" error or when prompted to enter root password
An unexpected interruption in the operation of an ESX host or an underlying datastore in VMware can damage the root file systems of the Unidesk appliances CachePoint Appliances and the Management Appliance. This damage can prevent them from booting automatically. When an operational interruption...