CWE-259 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-259/ Sun, 26 Feb 2023 06:49:06 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-259 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-259/ 32 32 CVE-2018-25069 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-25069/ Sun, 26 Feb 2023 06:49:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-25069/ A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability.

The post CVE-2018-25069 appeared first on CVE Vulnerability.

]]> A vulnerability classified as critical has been found in Netis Netcore Router. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The identifier VDB-217593 was assigned to this vulnerability.

The post CVE-2018-25069 appeared first on CVE Vulnerability.

]]> CVE-2020-7590 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7590/ Sun, 26 Feb 2023 06:43:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7590/ A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. […]

The post CVE-2020-7590 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in DCA Vantage Analyzer (All versions < V4.5 are affected by CVE-2020-7590. In addition, serial numbers < 40000 running software V4.4.0 are also affected by CVE-2020-15797). Affected devices use a hard-coded password to protect the onboard database. This could allow an attacker to read and or modify the onboard database. Successful exploitation requires direct physical access to the device.

The post CVE-2020-7590 appeared first on CVE Vulnerability.

]]> CVE-2021-36312 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36312/ Thu, 23 Feb 2023 14:10:40 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36312/ Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system.

The post CVE-2021-36312 appeared first on CVE Vulnerability.

]]> Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system.

The post CVE-2021-36312 appeared first on CVE Vulnerability.

]]> CVE-2021-32525 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32525/ Thu, 23 Feb 2023 14:09:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32525/ The same hard-coded password in QSAN Storage Manager’s in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32525 appeared first on CVE Vulnerability.

]]> The same hard-coded password in QSAN Storage Manager’s in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32525 appeared first on CVE Vulnerability.

]]> CVE-2021-22729 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-22729/ Thu, 23 Feb 2023 14:07:22 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-22729/ A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized administrative privileges […]

The post CVE-2021-22729 appeared first on CVE Vulnerability.

]]> A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized administrative privileges when accessing to the charging station web server.

The post CVE-2021-22729 appeared first on CVE Vulnerability.

]]> CVE-2023-0808 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0808/ Wed, 22 Feb 2023 14:02:17 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0808 A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The exploit has been disclosed […]

The post CVE-2023-0808 appeared first on CVE Vulnerability.

]]> A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability.

The post CVE-2023-0808 appeared first on CVE Vulnerability.

]]>