Vulnerabilities > Weak Password Requirements

DATE CVE VULNERABILITY TITLE RISK
2021-10-19 CVE-2021-38462 Weak Password Requirements vulnerability in Inhandnetworks Ir615 Firmware 2.3.0.R4724/2.3.0.R4870
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 does not enforce an efficient password policy.
network
low complexity
inhandnetworks CWE-521
critical
9.8
2021-10-13 CVE-2021-35498 Weak Password Requirements vulnerability in Tibco products
The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, and TIBCO Product and Service Catalog powered by TIBCO EBX contains a vulnerability that under certain specific conditions allows an attacker to enter a password other than the legitimate password and it will be accepted as valid.
network
low complexity
tibco CWE-521
critical
9.8
2021-09-09 CVE-2021-28914 Weak Password Requirements vulnerability in Bab-Technologie Eibport Firmware 3.8.2/3.8.3
BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced.
network
low complexity
bab-technologie CWE-521
6.5
2021-09-09 CVE-2021-28912 Weak Password Requirements vulnerability in Bab-Technologie Eibport Firmware 3.8.2/3.8.3
BAB TECHNOLOGIE GmbH eibPort V3.
network
low complexity
bab-technologie CWE-521
7.2
2021-08-11 CVE-2021-20418 Weak Password Requirements vulnerability in IBM Security Guardium 11.2
IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
network
low complexity
ibm CWE-521
critical
9.8
2021-08-04 CVE-2021-1522 Weak Password Requirements vulnerability in Cisco Connected Mobile Experiences
A vulnerability in the change password API of Cisco Connected Mobile Experiences (CMX) could allow an authenticated, remote attacker to alter their own password to a value that does not comply with the strong authentication requirements that are configured on an affected device.
network
low complexity
cisco CWE-521
4.3
2021-07-09 CVE-2021-32753 Weak Password Requirements vulnerability in Edgexfoundry Edgex Foundry
EdgeX Foundry is an open source project for building a common open framework for internet-of-things edge computing.
network
low complexity
edgexfoundry CWE-521
6.5
2021-06-24 CVE-2021-25923 Weak Password Requirements vulnerability in Open-Emr Openemr
In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit.
network
high complexity
open-emr CWE-521
8.1
2021-04-26 CVE-2021-25839 Weak Password Requirements vulnerability in Minthcm 3.0.8
A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing.
network
low complexity
minthcm CWE-521
critical
9.8
2021-04-26 CVE-2021-26797 Weak Password Requirements vulnerability in Hametech Hame SD1 Wi-Fi Firmware 20140224154640
An access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker to get system administrator through an open Telnet service.
network
low complexity
hametech CWE-521
critical
9.8