CWE-1392 (page 2)
Page 2 of 2 — CVEs classified under CWE-1392, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7898 | High | 7.3 | 2024-08-17 | A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of… |
CVE-2024-7746 | Critical | 9.8 | 2024-08-13 | Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the… |
CVE-2024-6788 | High | 8.6 | 2024-08-13 | A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileg… |
CVE-2023-40704 | Medium | 6.8 | 2024-07-18 | The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS syste… |
CVE-2024-6535 | Medium | 5.3 | 2024-07-17 | A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift, it configures the openshift oauth-pro… |
CVE-2024-5632 | | 2024-07-09 | Longse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device, create a WiFi network with a default password. A user is neit… | |
CVE-2024-4007 | High | 8.8 | 2024-07-01 | Default credential in install package in ABB ASPECT; NEXUS Series; MATRIX Series version 3.07 allows attacker to login to product instances wrongly configured. |
CVE-2024-27158 | High | 7.4 | 2024-06-14 | All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the reference URL. |
CVE-2023-43844 | High | 8.0 | 2024-05-28 | Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked to change the credentials after first… |
CVE-2024-5245 | High | 7.8 | 2024-05-23 | NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate p… |
CVE-2024-4622 | | 2024-05-15 | If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. If the default credentials are not chang… | |
CVE-2024-29844 | Critical | 9.8 | 2024-04-15 | Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon i… |
CVE-2024-31069 | High | 7.4 | 2024-04-12 | IO-1020 Micro ELD web server uses a default password for authentication. |
CVE-2024-30210 | High | 7.4 | 2024-04-12 | IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device. |
CVE-2024-28093 | High | 8.8 | 2024-03-26 | The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account. |
CVE-2023-49621 | Critical | 9.8 | 2024-01-09 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate installation" system state of the affected application uses def… |
CVE-2023-30801 | Critical | 9.8 | 2023-10-10 | All versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change… |
CVE-2023-3703 | Critical | 10.0 | 2023-09-03 | Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials |
CVE-2023-30603 | Critical | 9.8 | 2023-06-02 | Hitron Technologies CODA-5310 Telnet function with the default account and password, and there is no warning or prompt to ask users to change the default passw… |