Quest Software KACE Systems Deployment Appliance 安全漏洞

Quest Software KACE Systems Deployment Appliance is Quest Software's fast, automated system and disk imaging software. A security vulnerability exists in Quest Software KACE Systems Deployment Appliance version 9.0.146 that stems from the presence of publicly available LDAP binding credentials,...

PT-2023-24248 · Quest · Kace Systems Deployment/Remote Site Appliances

Name of the Vulnerable Software and Affected Versions: KACE Systems Deployment and Remote Site appliances version 9.0.146 Description: There is an LDAP bind credentials exposure. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an...

Quest / Dell KACE K2000 Systems Deployment Appliance (SDA) < 3.7 Hardcoded Credentials (HTTP)

The Quest / Dell KACE K2000 System Deployment Appliance SDA contains a hidden administrator account that allows a remote attacker to take control of an affected device. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2011-1672

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

Default credentials

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

CVE-2011-1672

The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the 1 unattend.xml or 2 sysprep.inf file, as demonstrated by reading a password...

CVE-2011-1672

Dell KACE K2000 Systems Deployment Appliance, versions 3.3.36822 and earlier, exposes a hidden CIFS share named 'peinst' that allows remote, unauthenticated attackers to read sensitive deployment data (unattend.xml and sysprep.inf), potentially exposing credentials. The vulnerability is documente...