Harman AMX Privilege Escalation

The vulnerability of the setUpSubtleUserAccount/bin/bw function in the Harman AMX multimedia stream management software is related to the existence of a strictly encrypted password for the 1MB@tMaN account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access ...

Unspecified vulnerability in Harman AMX (CNVD-2016-00786)

Harman AMX is a series of conversion controller products from Harman USA. A security vulnerability exists in the 'setUpSubtleUserAccount' function in the /bin/bw URI in versions of Harman AMX prior to 2015-10-12, which stems from the use of hard-coded passwords for BlackWidow accounts. A remote...

CVE-2015-8362

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote attackers to obtain access via a 1 SSH or 2 HTTP session, a different vulnerability than CVE-2016-1984...

CVE-2015-8362: Undefined Security Weakness

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote attackers to obtain access via a 1 SSH or 2 HTTP session, a different vulnerability than CVE-2016-1984...

PT-2016-1244

Name of the Vulnerable Software and Affected Versions Harman AMX devices affected versions not specified Description The issue is related to the setUpSubtleUserAccount function in /bin/bw, which has a hardcoded password for the 1MB@tMaN account. This makes it easier for remote attackers to obtain...

CVE-2016-1984: Undefined Security Weakness

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2016-01-20 has a hardcoded password for the 1MB@tMaN account, which makes it easier for remote attackers to obtain access via a 1 SSH or 2 HTTP session, a different vulnerability than CVE-2015-8362...

PT-2016-1117

Name of the Vulnerable Software and Affected Versions Harman AMX devices affected versions not specified Description The issue is related to the setUpSubtleUserAccount function in /bin/bw, which has a hardcoded password for the BlackWidow account. This makes it easier for remote attackers to obta...