Vulnerabilities > Use of Hard-coded Credentials
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-19 | CVE-2022-47558 | Use of Hard-coded Credentials vulnerability in Ormazabal Ekorccp Firmware and Ekorrci Firmware Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. | 9.8 |
| 2023-09-18 | CVE-2023-41030 | Use of Hard-coded Credentials vulnerability in Juplink Rx4-1500 Firmware Hard-coded credentials in Juplink RX4-1500 versions V1.0.2 through V1.0.5 allow unauthenticated attackers to log in to the web interface or telnet service as the 'user' user. | 9.8 |
| 2023-09-18 | CVE-2023-41595 | Use of Hard-coded Credentials vulnerability in Vaxilu X-Ui 1.8.3 An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password. | 7.5 |
| 2023-09-18 | CVE-2023-42328 | Use of Hard-coded Credentials vulnerability in Peppermint An issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the hardcoded session cookie. | 8.8 |
| 2023-09-16 | CVE-2023-42336 | Use of Hard-coded Credentials vulnerability in Netis-Systems Wf2409E Firmware 1.0.1.705 An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component. | 9.8 |
| 2023-09-14 | CVE-2023-37755 | Use of Hard-coded Credentials vulnerability in I-Doit i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. | 9.8 |
| 2023-09-13 | CVE-2023-40717 | Use of Hard-coded Credentials vulnerability in Fortinet Fortitester A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who managed to get a shell on the device to access the database via shell commands. | 7.8 |
| 2023-09-12 | CVE-2023-27169 | Use of Hard-coded Credentials vulnerability in Xpand-It Write-Back Manager 2.3.1 Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. | 6.5 |
| 2023-09-07 | CVE-2023-39420 | Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation 5.3.2.15 The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. | 8.8 |
| 2023-09-07 | CVE-2023-39421 | Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation 5.4.1.23 The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. | 7.7 |