86 matches found
CVE-2020-25749
CVE-2020-25749 建议描述 Rubetek摄像机RV-3406、RV-3409和RV-3411的Telnet服务（固件版本v342、v339）可能允许远程攻击者通过高权限账户完全控制设备。该漏洞源于系统账户使用了默认且静态的密码。Telnet服务无法禁用，且无法通过标准功能更改此密码。 附加信息 已向供应商发送关于该漏洞的信函。 漏洞类型 其他 CWE-798: 使用硬编码凭证 产品供应商 Rubetek https://rubetek.com/ 受影响产品代码库 摄像机RV-3406 - 固件版本339和342受影响。无修复版本。 摄像机RV-3409 -...
CVE-2026-42376
D-Link DIR-456U Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /etc/init0.d/S80telnetd.sh with the username "Alphanetworks" and the static password "whdrv01dlobdir456U" read from /etc/config/imagesign. The custom telnetd...
The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.
The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service is related to the use of a static password, wrgn76dlwbrdir605L, for the Alphanetworks account. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information, enhance...
The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.
The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of the static password wrgn35dlwbrdir600l for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...
The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.
The vulnerability of the telnetd.sh script of the D-Link DIR-600L router’s telnet service is related to the use of a static password, wrgn61dlwbrdir600L, for the Alphanetworks account. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information, enhance...
The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service allows a hacker to gain unauthorized access to protected information, increase their privileges, and execute arbitrary commands.
The vulnerability of the telnetd.sh script of the D-Link DIR-605L router’s telnet service is related to the use of a static password, wrgn35dlwbrdir605l, for the Alphanetworks account. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, enhanc...
CVE-2026-42372 D-Link DIR-605L A1 Hardcoded Telnet Backdoor Credentials
D-Link DIR-605L Hardware Revision A1 End-of-Life, EOL contains a hardcoded telnet backdoor. The device starts a telnet daemon at boot via /bin/telnetd.sh with the username "Alphanetworks" and the static password "wrgn35dlwbrdir605l" read from /etc/alphaconfig/imagesign. The custom telnetd binary...
CVE-2025-59107
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...
CVE-2025-59107
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...
CVE-2025-59107 Static Firmware Encryption Password in dormakaba access manager
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...
EUVD-2025-206367
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...
CVE-2025-59107
Dormakaba’s FWServiceTool uses an encrypted ZIP to deliver firmware for Access Managers. A static password is embedded to decrypt and extract the firmware, and this password has been valid across multiple firmware versions. This enables local access to firmware content, affecting confidentiality ...
Dormakaba Access Manager security vulnerabilities
Dormakaba Access Manager is a smart hardware controller developed by the American company Dormakaba. There is a security vulnerability in Dormakaba Access Manager, which stems from the use of a static extractable password in the firmware update ZIP file, potentially allowing the firmware to be...
PT-2026-4757
Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some instances is provided in an encrypted ZIP file. Within this tool, the password used to decrypt the ZIP and extract the firmware is set statically and can be...
PT-2026-2277
Name of the Vulnerable Software and Affected Versions DDSN Interactive Acora CMS version 10.7.1 Description A static password reset token used in the password reset function allows attackers to reset user passwords and take over accounts through replay attacks. The vulnerable function is the...
EUVD-2020-24429
Malware in sbrugna...
EUVD-2020-18401
Malware in sbrugna...
EUVD-2021-15658
Malware in sbrugna...