CVE-2021-27437

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...

Hardcoded credentials

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...

CVE-2021-27437

Advantech WISE-PaaS/RMM is affected by CVE-2021-27437 due to hard-coded administrator credentials in the dashboard, allowing unauthenticated access to query Grafana APIs. Affected versions are prior to 9.0.1 (per initial description) and Cisco/Red Hat-ecosourced documents also reference pre-9.0.1...

CVE-2021-27437

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...

CVE-2021-27437: Use of Hard-coded Credentials

The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation on the WISE-PaaS/RMM versions prior to...

PT-2021-17450

Name of the Vulnerable Software and Affected Versions WISE-PaaS/RMM versions prior to 9.0.1 Description The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to quer...

Advantech WISE-PaaS/RMM 信任管理问题漏洞

Advantech WISE-PaaS/RMM is a remote monitoring and management platform for IoT devices from Advantech Taiwan, China.Advantech WISE-PaaS/RMM versions prior to 9.0.1 are vulnerable to a trust management issue that stems from the presence of hard-coded credentials in the dashboard. An unauthenticate...

Advantech WISE-PaaS RMM

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Advantech Equipment: WISE-PaaS/RMM Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain sensitive information...

PT-2021-5475

Name of the Vulnerable Software and Affected Versions WISE-4060, Adam-6050 D, Adam.NET Utility affected versions not specified Description The issue is related to a lack of authentication attempt limitations in the Ethernet module software. This could allow a remote attacker to gain full access t...

PT-2021-5473

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to a flaw in the password change procedure via the web server in the WISE-4060 Ethernet module's firmware. This flaw can allow a remote attacker to gain full access to...

PT-2021-5477

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to a lack of authentication for a critical function in the Ethernet module software, which can be exploited by a remote attacker to cause a denial of...

PT-2021-5470

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to insufficient protection of web pages in the software of WISE-4060 and Adam-6050 D web server Ethernet modules. This could allow a remote attacker to...

PT-2021-5466

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to errors in the password recovery mechanism of the Ethernet software. It allows a remote attacker to restore the device to its default settings using a...

PT-2021-5465

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to errors in session management within the WISE-4060 Ethernet module's firmware. It allows a remote attacker to exploit the issue and gain unauthorized access to the...

Denial of Service Vulnerability in Wise System Monitor

Wise System Monitor is a Windows system resource monitoring and management tool. A denial of service vulnerability exists in Wise System Monitor. An attacker could exploit this vulnerability to cause a computer crash BSOD...

Denial of Service Vulnerability in Wise Force Deleter

Wise Force Deleter is a file force deletion tool. Wise Force Deleter suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause a computer crash BSOD...

Denial of Service Vulnerability in Wise Anti Malware

Wise Anti Malware is a real-time malware defense tool for system security tools Windows system. Wise Anti Malware has a denial of service vulnerability that can be exploited by attackers to cause a computer crash BSOD...

SQL Injection Vulnerability in frontend of wise on-demand server software

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the frontend of the sewise VOD server software. An attacker can exploit the vulnerability to obtain sensitive database information...

PT-2021-5467

Name of the Vulnerable Software and Affected Versions WISE-4060 affected versions not specified Description The issue is related to the storage of confidential information in an unencrypted manner in the WISE-4060 Ethernet module's firmware. This could allow an attacker to gain full access to the...

PT-2021-5472

Name of the Vulnerable Software and Affected Versions WISE-4060 and Adam-6050 D affected versions not specified Description The issue is related to the use of weak encryption algorithms in the firmware of Ethernet modules. This could allow a remote attacker to gain full access to the device with...