Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2018-03-20 CVE-2017-14006 Use of Hard-coded Credentials vulnerability in GE Xeleris
GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use default or hard-coded credentials.
network
low complexity
ge CWE-798
critical
9.8
2018-03-20 CVE-2017-14004 Use of Hard-coded Credentials vulnerability in GE Gemnet License Server
GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credentials.
network
low complexity
ge CWE-798
critical
9.8
2018-03-20 CVE-2017-14002 Use of Hard-coded Credentials vulnerability in GE Infinia Hawkeye 4 Firmware
GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default or hard-coded credentials.
network
low complexity
ge CWE-798
critical
9.8
2018-03-19 CVE-2018-5552 Use of Hard-coded Credentials vulnerability in Docutracinc Dtisqlinstaller 1.6.4.0
Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contains a hard-coded cryptographic salt, "S@l+&pepper".
local
low complexity
docutracinc CWE-798
3.3
2018-03-19 CVE-2018-5551 Use of Hard-coded Credentials vulnerability in Docutracinc Dtisqlinstaller 1.6.4.0
Versions of DocuTrac QuicDoc and Office Therapy that ship with DTISQLInstaller.exe version 1.6.4.0 and prior contain three credentials with known passwords: QDMaster, OTMaster, and sa.
network
low complexity
docutracinc CWE-798
critical
10.0
2018-03-16 CVE-2017-8013 Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0
EMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains undocumented accounts with hard-coded passwords and various privileges.
network
low complexity
emc CWE-798
critical
9.8
2018-03-12 CVE-2016-0235 Use of Hard-coded Credentials vulnerability in IBM Security Guardium Database Activity Monitor 10.0
IBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact by leveraging administrator access to a hardcoded password, related to use on GRUB systems.
local
low complexity
ibm CWE-798
8.2
2018-03-12 CVE-2018-1206 Use of Hard-coded Credentials vulnerability in EMC Data Protection Advisor 6.3.0/6.4.0
Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges.
local
low complexity
emc CWE-798
7.8
2018-03-09 CVE-2018-7229 Use of Hard-coded Credentials vulnerability in Schneider-Electric products
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.
network
low complexity
schneider-electric CWE-798
critical
9.8
2018-03-09 CVE-2014-6617 Use of Hard-coded Credentials vulnerability in Industrial.Softing Fg-100 PB Profibus Firmware Fgx00Pbv2.02.0.00
Softing FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
network
low complexity
industrial-softing CWE-798
critical
9.8