Vulnerabilities > Insecure Default Initialization of Resource

DATE CVE VULNERABILITY TITLE RISK
2019-03-21 CVE-2019-5490 Insecure Default Initialization of Resource vulnerability in Netapp Service Processor
Certain versions between 2.x to 5.x (refer to advisory) of the NetApp Service Processor firmware were shipped with a default account enabled that could allow unauthorized arbitrary command execution.
network
low complexity
netapp CWE-1188
critical
9.8
2019-03-21 CVE-2018-17497 Insecure Default Initialization of Resource vulnerability in Thresholdsecurity Evisitorpass 1.5.5.2
eVisitorPass contains default administrative credentials.
local
low complexity
thresholdsecurity CWE-1188
7.8
2019-03-21 CVE-2018-17485 Insecure Default Initialization of Resource vulnerability in Jollytech Lobby Track 8.2.186
Lobby Track Desktop contains default administrative credentials.
local
low complexity
jollytech CWE-1188
7.8
2019-03-07 CVE-2019-3783 Insecure Default Initialization of Resource vulnerability in Cloudfoundry Stratos
Cloud Foundry Stratos, versions prior to 2.3.0, deploys with a public default session store secret.
network
low complexity
cloudfoundry CWE-1188
8.8
2019-02-28 CVE-2019-1994 Insecure Default Initialization of Resource vulnerability in Google Android 8.0/8.1/9.0
In refresh of DevelopmentTiles.java, there is the possibility of leaving development settings accessible due to an insecure default value.
network
low complexity
google CWE-1188
8.8
2019-01-18 CVE-2019-3909 Insecure Default Initialization of Resource vulnerability in Identicard Premisys ID 3.1.190
Premisys Identicard version 3.1.190 database uses default credentials.
network
low complexity
identicard CWE-1188
critical
9.8
2018-12-23 CVE-2018-20402 Insecure Default Initialization of Resource vulnerability in Safe FME Server
Safe Software FME Server through 2018.1 creates and enables three additional accounts in addition to the initial administrator account.
network
low complexity
safe CWE-1188
8.8
2018-11-19 CVE-2018-17906 Insecure Default Initialization of Resource vulnerability in Philips Intellispace Pacs and Isite Pacs
Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions.
low complexity
philips CWE-1188
8.8
2018-10-01 CVE-2018-10605 Insecure Default Initialization of Resource vulnerability in Martem Telem-Gw6 Firmware and Telem-Gwm Firmware
Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.
network
low complexity
martem CWE-1188
8.8
2018-09-20 CVE-2018-16752 Insecure Default Initialization of Resource vulnerability in Linknet-Usa Lw-N605R Firmware 12.20.2.1486
LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp.
network
low complexity
linknet-usa CWE-1188
8.8