CWE:

Nic nie znaleziono w bazie WLB2

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-08-31

CVE-2024-39747

Updating...

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.

2024-08-28

CVE-2024-39584

Updating...

Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution.

2024-08-17

CVE-2024-7898

Updating...

A vulnerability classified as critical was found in Tosei Online Store Management System ??????????? 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

2024-07-18

CVE-2023-40704

Updating...

Philips Vue PACS uses default credentials for potentially critical functionality.

2024-07-17

CVE-2024-6535

Updating...

A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-proxy with a static cookie-secret. In certain circumstances, this may allow an attacker to bypass authentication to the Skupper console via a specially-crafted cookie.

2024-07-01

CVE-2024-4007

Updating...

Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.

2024-05-15

CVE-2024-4622

Updating...

If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not changed, an attacker can use public knowledge to access the device as an administrator.

2024-04-12

CVE-2024-31069

Updating...

IO-1020 Micro ELD web server uses a default password for authentication.

2024-01-09

CVE-2023-49621

Updating...

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device.

2023-09-03

CVE-2023-3703

Updating...

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials

 

---

Copyright 2024, cxsecurity.com