Vulnerabilities (CVE)

Filtered by CWE-1392
Total 52 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-4007 2024-11-21 N/A 8.8 HIGH
Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured.
CVE-2024-31069 2024-11-21 N/A 7.4 HIGH
IO-1020 Micro ELD web server uses a default password for authentication.
CVE-2024-30210 2024-11-21 N/A 7.4 HIGH
IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device.
CVE-2024-29844 2024-11-21 N/A 9.8 CRITICAL
Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.
CVE-2024-28093 2024-11-21 N/A 8.8 HIGH
The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.
CVE-2024-27158 2024-11-21 N/A 7.4 HIGH
All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL.
CVE-2023-49621 1 Siemens 1 Simatic Cn 4100 2024-11-21 N/A 9.8 CRITICAL
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses default credential with admin privileges. An attacker could use the credentials to gain complete control of the affected device.
CVE-2023-3703 1 Proscend 40 A510-f1, A510-f1 Firmware, A510-l1 and 37 more 2024-11-21 N/A 10.0 CRITICAL
Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials
CVE-2023-30603 1 Hitrontech 2 Coda-5310, Coda-5310 Firmware 2024-11-21 N/A 9.8 CRITICAL
Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default password and account. An unauthenticated remote attackers can exploit this vulnerability to obtain the administrator’s privilege, resulting in performing arbitrary system operation or disrupt service.
CVE-2024-6245 2024-11-07 N/A 7.4 HIGH
Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker to try common or default usernames and passwords.The issue was detected on a 2022 Maruti Suzuki Brezza in India Market. This issue affects SmartPlay: 66T0.05.50.
CVE-2024-39747 3 Ibm, Linux, Microsoft 4 Aix, Sterling Connect Direct Web Services, Linux Kernel and 1 more 2024-09-16 N/A 9.8 CRITICAL
IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality.
CVE-2024-7746 1 Traccar 1 Traccar 2024-08-22 N/A 9.8 CRITICAL
Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication mechanism.  These transactions could have an impact on any sensitive aspect of the platform, including Confidentiality, Integrity and Availability.