Vulnerabilities > Weak Password Requirements

DATE CVE VULNERABILITY TITLE RISK
2018-08-24 CVE-2017-9818 Weak Password Requirements vulnerability in Npci Bharat Interface for Money (Bhim) 1.3
The National Payments Corporation of India BHIM application 1.3 for Android relies on a four-digit passcode, which makes it easier for attackers to obtain access.
network
low complexity
npci CWE-521
5.0
2018-08-23 CVE-2018-15748 Weak Password Requirements vulnerability in Dell products
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.15(2335dn MFP) 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of the Email Settings webpage.
network
low complexity
dell CWE-521
4.0
2018-06-28 CVE-2018-12925 Weak Password Requirements vulnerability in Lantronix MSS Firmware
Baseon Lantronix MSS devices do not require a password for TELNET access.
network
low complexity
lantronix CWE-521
critical
10.0
2018-05-02 CVE-2018-1101 Weak Password Requirements vulnerability in Redhat Ansible Tower and Cloudforms
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows for privilege escalation.
network
low complexity
redhat CWE-521
6.5
2018-05-02 CVE-2017-1601 Weak Password Requirements vulnerability in IBM Security Guardium Database Activity Monitor
IBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 Database Activity Monitor does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
network
low complexity
ibm CWE-521
7.5
2018-03-16 CVE-2018-1000134 Weak Password Requirements vulnerability in Pingidentity Ldapsdk
UnboundID LDAP SDK version from commit 801111d8b5c732266a5dbd4b3bb0b6c7b94d7afb up to commit 8471904a02438c03965d21367890276bc25fa5a6, where the issue was reported and fixed contains an Incorrect Access Control vulnerability in process function in SimpleBindRequest class doesn't check for empty password when running in synchronous mode.
network
low complexity
pingidentity CWE-521
7.5
2018-03-10 CVE-2018-6312 Weak Password Requirements vulnerability in Foxconn Ap-Fc4064-T Firmware Apgtb385.8.3Lb15W47Lte
A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password.
network
low complexity
foxconn CWE-521
critical
9.0
2018-02-27 CVE-2018-1372 Weak Password Requirements vulnerability in IBM Security Guardium BIG Data Intelligence 3.1
IBM Security Guardium Big Data Intelligence (SonarG) 3.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
network
low complexity
ibm CWE-521
5.0
2018-02-22 CVE-2018-0204 Weak Password Requirements vulnerability in Cisco Prime Collaboration Provisioning 12.1
A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users.
network
low complexity
cisco CWE-521
5.0
2017-12-22 CVE-2017-16727 Weak Password Requirements vulnerability in Moxa Nport W2150A Firmware and Nport W2250A Firmware
A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11.
network
low complexity
moxa CWE-521
6.4