CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
CVE-2024-0865 (GCVE-0-2024-0865)
Vulnerability from cvelistv5 – Published: 2024-06-12 17:23 – Updated: 2024-08-01 18:18
VLAI
Summary
CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege
escalation when logged in as a non-administrative user.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Schneider Electric | EcoStruxure IT Gateway |
Affected:
1.20.x and prior
|
|
| schneider-electric | ecostruxure_it_gateway |
Affected:
0 , < 1.20.x
(custom)
cpe:2.3:a:schneider-electric:ecostruxure_it_gateway:0:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:schneider-electric:ecostruxure_it_gateway:0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "ecostruxure_it_gateway",
"vendor": "schneider-electric",
"versions": [
{
"lessThan": "1.20.x",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-0865",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-12T19:59:08.710375Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-12T20:04:39.540Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T18:18:18.824Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2024-044-03.pdf"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EcoStruxure IT Gateway",
"vendor": "Schneider Electric",
"versions": [
{
"status": "affected",
"version": "1.20.x and prior"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege\nescalation when logged in as a non-administrative user."
}
],
"value": "CWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege\nescalation when logged in as a non-administrative user."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-12T17:23:00.908Z",
"orgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
"shortName": "schneider"
},
"references": [
{
"url": "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-044-03\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2024-044-03.pdf"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "076d1eb6-cfab-4401-b34d-6dfc2a413bdb",
"assignerShortName": "schneider",
"cveId": "CVE-2024-0865",
"datePublished": "2024-06-12T17:23:00.908Z",
"dateReserved": "2024-01-24T17:18:07.117Z",
"dateUpdated": "2024-08-01T18:18:18.824Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-0949 (GCVE-0-2024-0949)
Vulnerability from cvelistv5 – Published: 2024-06-27 09:36 – Updated: 2025-10-14 12:33
VLAI
Title
Improper Access Control in Talya Informatics' Elektraweb
Summary
Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.This issue affects Elektraweb: before v17.0.68.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Talya Informatics | Elektraweb |
Affected:
0 , < v17.0.68
(custom)
|
|
| talya_informatics | elektraweb |
Affected:
0 , < v17.0.68
(custom)
cpe:2.3:a:talya_informatics:elektraweb:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:talya_informatics:elektraweb:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "elektraweb",
"vendor": "talya_informatics",
"versions": [
{
"lessThan": "v17.0.68",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-0949",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-24T13:32:07.238546Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-24T13:37:21.437Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-01T18:26:28.980Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.usom.gov.tr/bildirim/tr-24-0808"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Elektraweb",
"vendor": "Talya Informatics",
"versions": [
{
"lessThan": "v17.0.68",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Yusuf Kamil \u00c7AVU\u015eO\u011eLU"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.\u003cp\u003eThis issue affects Elektraweb: before v17.0.68.\u003c/p\u003e"
}
],
"value": "Missing Authentication, Files or Directories Accessible to External Parties, Use of Hard-coded Credentials vulnerability in Talya Informatics Elektraweb allows Authentication Bypass.This issue affects Elektraweb: before v17.0.68."
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552 Files or Directories Accessible to External Parties",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-14T12:33:41.539Z",
"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
"shortName": "TR-CERT"
},
"references": [
{
"url": "https://www.usom.gov.tr/bildirim/tr-24-0808"
}
],
"source": {
"advisory": "TR-24-0808",
"defect": [
"TR-24-0808"
],
"discovery": "UNKNOWN"
},
"title": "Improper Access Control in Talya Informatics\u0027 Elektraweb",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
"assignerShortName": "TR-CERT",
"cveId": "CVE-2024-0949",
"datePublished": "2024-06-27T09:36:59.897Z",
"dateReserved": "2024-01-26T13:00:20.711Z",
"dateUpdated": "2025-10-14T12:33:41.539Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-10025 (GCVE-0-2024-10025)
Vulnerability from cvelistv5 – Published: 2024-10-17 09:58 – Updated: 2024-10-17 16:33
VLAI
Title
Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx
Summary
A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://sick.com/psirt | x_SICK PSIRT Webseite |
| https://www.cisa.gov/resources-tools/resources/ic… | x_ICS-CERT recommended practices on Industrial Security |
| https://cdn.sick.com/media/docs/1/11/411/Special_… | x_SICK Operating Guidelines |
| https://www.first.org/cvss/calculator/3.1 | x_CVSS v3.1 Calculator |
| https://www.sick.com/.well-known/csaf/white/2024/… | vendor-advisory |
| https://www.sick.com/.well-known/csaf/white/2024/… | vendor-advisoryx_csaf |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| SICK AG | SICK CLV6xx |
Affected:
all versions
|
|
| SICK AG | SICK Lector6xx |
Affected:
all versions
|
|
| SICK AG | SICK RFx6xx |
Affected:
all versions
|
|
| sick | rfu620-10507_firmware |
Affected:
0 , < *
(custom)
cpe:2.3:o:sick:lector611_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:sick:lector610_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:sick:lector620_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector621_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector622_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector630_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector632_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector640_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector642_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector650_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector651_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lector654_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv620_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv621_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv622_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv630_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv631_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv632_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv640_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv642_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv650_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:clv651_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10600_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10601_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10603_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10604_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10605_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10607_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10609_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10610_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10613_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10614_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10618_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu610-10700_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10100_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10101_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10102_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10103_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10104_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10105_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10107_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10108_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10111_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10114_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10118_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10400_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10401_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10500_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10501_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10503_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10504_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:sick:rfu620-10507_firmware:-:*:*:*:*:*:*:* |
Date Public
2024-10-17 09:44
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:sick:lector611_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector610_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector620_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector621_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector622_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector630_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector632_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector640_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector642_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector650_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector651_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:lector654_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv620_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv621_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv622_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv630_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv631_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv632_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv640_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv642_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv650_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:clv651_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10600_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10601_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10603_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10604_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10605_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10607_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10609_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10610_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10613_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10614_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10618_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu610-10700_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10100_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10101_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10102_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10103_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10104_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10105_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10107_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10108_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10111_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10114_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10118_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10400_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10401_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10500_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10501_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10503_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10504_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:sick:rfu620-10507_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "rfu620-10507_firmware",
"vendor": "sick",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-10025",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-10-17T13:41:03.974704Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-10-17T16:33:53.645Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "SICK CLV6xx",
"vendor": "SICK AG",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SICK Lector6xx",
"vendor": "SICK AG",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
},
{
"defaultStatus": "unaffected",
"product": "SICK RFx6xx",
"vendor": "SICK AG",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
}
],
"datePublic": "2024-10-17T09:44:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an \u201cAuthorized Client\u201d if the customer has not changed the default password."
}
],
"value": "A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an \u201cAuthorized Client\u201d if the customer has not changed the default password."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-17T09:58:03.111Z",
"orgId": "a6863dd2-93fc-443d-bef1-79f0b5020988",
"shortName": "SICK AG"
},
"references": [
{
"tags": [
"x_SICK PSIRT Webseite"
],
"url": "https://sick.com/psirt"
},
{
"tags": [
"x_ICS-CERT recommended practices on Industrial Security"
],
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
},
{
"tags": [
"x_SICK Operating Guidelines"
],
"url": "https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF"
},
{
"tags": [
"x_CVSS v3.1 Calculator"
],
"url": "https://www.first.org/cvss/calculator/3.1"
},
{
"tags": [
"vendor-advisory"
],
"url": "https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.pdf"
},
{
"tags": [
"vendor-advisory",
"x_csaf"
],
"url": "https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Customers are strongly advised to change their default passwords.\u003cbr\u003e"
}
],
"value": "Customers are strongly advised to change their default passwords."
}
],
"source": {
"advisory": "sca-2024-0003",
"discovery": "INTERNAL"
},
"timeline": [
{
"lang": "en",
"time": "2024-10-17T09:53:00.000Z",
"value": "1: Initial version"
}
],
"title": "Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6863dd2-93fc-443d-bef1-79f0b5020988",
"assignerShortName": "SICK AG",
"cveId": "CVE-2024-10025",
"datePublished": "2024-10-17T09:58:03.111Z",
"dateReserved": "2024-10-16T07:45:23.632Z",
"dateUpdated": "2024-10-17T16:33:53.645Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-1039 (GCVE-0-2024-1039)
Vulnerability from cvelistv5 – Published: 2024-02-01 21:38 – Updated: 2025-08-07 18:28
VLAI
Title
Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER
Summary
Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.cisa.gov/news-events/ics-advisories/i… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Gessler GmbH | WEB-MASTER |
Affected:
7.9
|
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T18:26:30.395Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"government-resource",
"x_transferred"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-01"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-1039",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-02T20:20:33.836369Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-08T15:45:21.273Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "WEB-MASTER",
"vendor": "Gessler GmbH",
"versions": [
{
"status": "affected",
"version": "7.9"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Felix Eberstaller and Nino F\u00fcrthauer of Limes Security"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eGessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device.\u003c/span\u003e"
}
],
"value": "Gessler GmbH WEB-MASTER has a restoration account that uses weak hard coded credentials and if exploited could allow an attacker control over the web management of the device."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-07T18:28:32.629Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-032-01"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eGessler GmbH recommends updating EZ2 to 3.2 or greater and WebMaster to 4.4 or greater to mitigate these vulnerabilities. Updates have to be applied by Gessler GmbH technicians. For more information contact \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.gessler.de/en/contact-us/\"\u003eGessler GmbH\u003c/a\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e.\u003c/span\u003e\n\n\u003cbr\u003e"
}
],
"value": "Gessler GmbH recommends updating EZ2 to 3.2 or greater and WebMaster to 4.4 or greater to mitigate these vulnerabilities. Updates have to be applied by Gessler GmbH technicians. For more information contact Gessler GmbH https://www.gessler.de/en/contact-us/ ."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Use of Hard-coded Credentials in Gessler GmbH WEB-MASTER",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2024-1039",
"datePublished": "2024-02-01T21:38:48.454Z",
"dateReserved": "2024-01-29T15:59:58.085Z",
"dateUpdated": "2025-08-07T18:28:32.629Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-10451 (GCVE-0-2024-10451)
Vulnerability from cvelistv5 – Published: 2024-11-25 07:37 – Updated: 2025-11-11 16:08
VLAI
Title
Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process
Summary
A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in environment variables during the build process is also stored as a default values, making it accessible during runtime. Indirect usage of environment variables for SPI options and Quarkus properties is also vulnerable due to unconditional expansion by PropertyMapper logic, capturing sensitive data as default values in all Keycloak versions up to 26.0.2.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2024:10175 | vendor-advisoryx_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:10176 | vendor-advisoryx_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:10177 | vendor-advisoryx_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2024:10178 | vendor-advisoryx_refsource_REDHAT |
| https://access.redhat.com/security/cve/CVE-2024-10451 | vdb-entryx_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=2322096 | issue-trackingx_refsource_REDHAT |
Impacted products
9 products
| Vendor | Product | Version | |
|---|---|---|---|
| Red Hat | Red Hat build of Keycloak 24 |
Unaffected:
24.0.9-1 , < *
(rpm)
cpe:/a:redhat:build_keycloak:24::el9 |
|
| Red Hat | Red Hat build of Keycloak 24 |
Unaffected:
24-18 , < *
(rpm)
cpe:/a:redhat:build_keycloak:24::el9 |
|
| Red Hat | Red Hat build of Keycloak 24.0.9 |
cpe:/a:redhat:build_keycloak:24 |
|
| Red Hat | Red Hat build of Keycloak 26.0 |
Unaffected:
26.0.6-2 , < *
(rpm)
cpe:/a:redhat:build_keycloak:26.0::el9 |
|
| Red Hat | Red Hat build of Keycloak 26.0 |
Unaffected:
26.0-5 , < *
(rpm)
cpe:/a:redhat:build_keycloak:26.0::el9 |
|
| Red Hat | Red Hat build of Keycloak 26.0 |
Unaffected:
26.0-6 , < *
(rpm)
cpe:/a:redhat:build_keycloak:26.0::el9 |
|
| Red Hat | Red Hat build of Keycloak 26.0.6 |
cpe:/a:redhat:build_keycloak:26 |
|
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 |
cpe:/a:redhat:jboss_enterprise_application_platform:8 |
|
| Red Hat | Red Hat Single Sign-On 7 |
cpe:/a:redhat:red_hat_single_sign_on:7 |
Date Public
2024-11-21 16:55
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-10451",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-25T16:00:10.921097Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-25T16:00:38.099Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-operator-bundle",
"product": "Red Hat build of Keycloak 24",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "24.0.9-1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-rhel9",
"product": "Red Hat build of Keycloak 24",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "24-18",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:24::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-rhel9-operator",
"product": "Red Hat build of Keycloak 24",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "24-18",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:24"
],
"defaultStatus": "unaffected",
"packageName": "org.keycloak/keycloak-quarkus-server",
"product": "Red Hat build of Keycloak 24.0.9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-operator-bundle",
"product": "Red Hat build of Keycloak 26.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "26.0.6-2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-rhel9",
"product": "Red Hat build of Keycloak 26.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "26.0-5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:build_keycloak:26.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhbk/keycloak-rhel9-operator",
"product": "Red Hat build of Keycloak 26.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "26.0-6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:build_keycloak:26"
],
"defaultStatus": "unaffected",
"packageName": "org.keycloak/keycloak-quarkus-server",
"product": "Red Hat build of Keycloak 26.0.6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html",
"cpes": [
"cpe:/a:redhat:jboss_enterprise_application_platform:8"
],
"defaultStatus": "unaffected",
"packageName": "org.keycloak/keycloak-quarkus-server",
"product": "Red Hat JBoss Enterprise Application Platform 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_single_sign_on:7"
],
"defaultStatus": "unknown",
"packageName": "org.keycloak/keycloak-quarkus-server",
"product": "Red Hat Single Sign-On 7",
"vendor": "Red Hat"
}
],
"credits": [
{
"lang": "en",
"value": "Red Hat would like to thank Steven Hawkins for reporting this issue."
}
],
"datePublic": "2024-11-21T16:55:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Keycloak. This issue occurs because sensitive runtime values, such as passwords, may be captured during the Keycloak build process and embedded as default values in bytecode, leading to unintended information disclosure. In Keycloak 26, sensitive data specified directly in environment variables during the build process is also stored as a default values, making it accessible during runtime. Indirect usage of environment variables for SPI options and Quarkus properties is also vulnerable due to unconditional expansion by PropertyMapper logic, capturing sensitive data as default values in all Keycloak versions up to 26.0.2."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Moderate"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-11-11T16:08:35.556Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2024:10175",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:10175"
},
{
"name": "RHSA-2024:10176",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:10176"
},
{
"name": "RHSA-2024:10177",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:10177"
},
{
"name": "RHSA-2024:10178",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2024:10178"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2024-10451"
},
{
"name": "RHBZ#2322096",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2322096"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-10-28T07:27:41.800Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2024-11-21T16:55:00.000Z",
"value": "Made public."
}
],
"title": "Org.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process",
"x_redhatCweChain": "CWE-798: Use of Hard-coded Credentials"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2024-10451",
"datePublished": "2024-11-25T07:37:05.161Z",
"dateReserved": "2024-10-28T07:34:31.748Z",
"dateUpdated": "2025-11-11T16:08:35.556Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-11147 (GCVE-0-2024-11147)
Vulnerability from cvelistv5 – Published: 2025-01-23 16:37 – Updated: 2025-02-12 17:07
VLAI
Title
ECOVACS lawnmowers and vacuums deterministic root password
Summary
ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| ECOVACS | Unspecified robots |
Affected:
*
|
Date Public
2023-12-27 00:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11147",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-23T16:54:55.367221Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-12T17:07:28.749Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "Unspecified robots",
"vendor": "ECOVACS",
"versions": [
{
"status": "affected",
"version": "*"
}
]
}
],
"datePublic": "2023-12-27T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "ECOVACS robot lawnmowers and vacuums use a deterministic root password generated based on model and serial number. An attacker with shell access can login as root."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 7.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 7,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-23T16:37:54.479Z",
"orgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"shortName": "cisa-cg"
},
"references": [
{
"name": "url",
"url": "https://dontvacuum.me/talks/HITCON2024/HITCON-CMT-2024_Ecovacs.pdf"
},
{
"name": "url",
"url": "https://dontvacuum.me/talks/37c3-2023/37c3-vacuuming-and-mowing.pdf"
},
{
"name": "url",
"url": "https://builder.dontvacuum.me/ecopassword.php"
}
],
"title": "ECOVACS lawnmowers and vacuums deterministic root password"
}
},
"cveMetadata": {
"assignerOrgId": "9119a7d8-5eab-497f-8521-727c672e3725",
"assignerShortName": "cisa-cg",
"cveId": "CVE-2024-11147",
"datePublished": "2025-01-23T16:37:54.479Z",
"dateReserved": "2024-11-12T15:39:13.966Z",
"dateUpdated": "2025-02-12T17:07:28.749Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11630 (GCVE-0-2024-11630)
Vulnerability from cvelistv5 – Published: 2024-11-22 22:00 – Updated: 2024-11-25 21:23
VLAI
Title
E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials
Summary
A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 up to 3.2 and classified as critical. This vulnerability affects unknown code of the component OEM Backend. The manipulation leads to hard-coded credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.285916 | vdb-entry |
| https://vuldb.com/?ctiid.285916 | signaturepermissions-required |
| https://vuldb.com/?submit.444738 | third-party-advisory |
| https://github.com/I3eg1nner/iot-vuln/blob/main/E… | exploit |
Impacted products
18 products
| Vendor | Product | Version | |
|---|---|---|---|
| E-Lins | H685 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H685f |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H700 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H720 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H750 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H820 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H820Q |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H820Q0 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| E-Lins | H900 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 |
|
| e-lins | h685 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h685:*:*:*:*:*:*:*:* |
|
| e-lins | h685f |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h685f:*:*:*:*:*:*:*:* |
|
| e-lins | h700 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h700:*:*:*:*:*:*:*:* |
|
| e-lins | h720 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h720:*:*:*:*:*:*:*:* |
|
| e-lins | h750 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h750:*:*:*:*:*:*:*:* |
|
| e-lins | h820 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h820:*:*:*:*:*:*:*:* |
|
| e-lins | h820q |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h820q:*:*:*:*:*:*:*:* |
|
| e-lins | h820q0 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h820q0:*:*:*:*:*:*:*:* |
|
| e-lins | h900 |
Affected:
3.0
Affected: 3.1 Affected: 3.2 cpe:2.3:a:e-lins:h900:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:e-lins:h685:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h685",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h685f:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h685f",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h700:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h700",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h720:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h720",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h750:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h750",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h820:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h820",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h820q:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h820q",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h820q0:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h820q0",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:e-lins:h900:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "h900",
"vendor": "e-lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11630",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-25T21:06:04.277733Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-25T21:23:06.245Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"OEM Backend"
],
"product": "H685",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H685f",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H700",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H720",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H750",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H820",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H820Q",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H820Q0",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
},
{
"modules": [
"OEM Backend"
],
"product": "H900",
"vendor": "E-Lins",
"versions": [
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "3.2"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "liutong (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 up to 3.2 and classified as critical. This vulnerability affects unknown code of the component OEM Backend. The manipulation leads to hard-coded credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "In E-Lins H685, H685f, H700, H720, H750, H820, H820Q, H820Q0 and H900 bis 3.2 wurde eine kritische Schwachstelle gefunden. Das betrifft eine unbekannte Funktionalit\u00e4t der Komponente OEM Backend. Durch Manipulation mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk angegangen werden. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Als bestm\u00f6gliche Massnahme werden Anpassungen an der Konfiguration empfohlen."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-259",
"description": "Use of Hard-coded Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-22T22:00:07.324Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-285916 | E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.285916"
},
{
"name": "VDB-285916 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.285916"
},
{
"name": "Submit #444738 | E-Lins Technology E-Lins H685 Routers \u003c=v3.2.337 Hard-coded Credentials",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.444738"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/I3eg1nner/iot-vuln/blob/main/E-lins/Hard-Coded%20Credential%20Vulnerability%20in%20E-Lins%20Routers.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-11-22T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-11-22T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-11-22T18:05:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "E-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-11630",
"datePublished": "2024-11-22T22:00:07.324Z",
"dateReserved": "2024-11-22T17:00:20.839Z",
"dateUpdated": "2024-11-25T21:23:06.245Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-1344 (GCVE-0-2024-1344)
Vulnerability from cvelistv5 – Published: 2024-02-19 11:19 – Updated: 2024-08-19 14:21
VLAI
Title
Encrypted database credentials in LaborOfficeFree
Summary
Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user can log in remotely and has root-like privileges.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| LaborOfficeFree | LaborOfficeFree |
Affected:
19.10
|
|
| prgtec | laborofficefree |
Affected:
19.10
cpe:2.3:a:prgtec:laborofficefree:19.10:*:*:*:*:*:*:* |
Date Public
2024-02-08 11:00
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T18:33:25.699Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:prgtec:laborofficefree:19.10:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "laborofficefree",
"vendor": "prgtec",
"versions": [
{
"status": "affected",
"version": "19.10"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-1344",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-19T14:10:04.373999Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-19T14:21:03.997Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "LaborOfficeFree ",
"vendor": "LaborOfficeFree ",
"versions": [
{
"status": "affected",
"version": "19.10 "
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Pedro Gabald\u00f3n Juli\u00e1"
},
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Javier Medina Munuera"
},
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Antonio Jos\u00e9 G\u00e1lvez S\u00e1nchez"
},
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Alejandro Ba\u00f1o Andr\u00e9s"
}
],
"datePublic": "2024-02-08T11:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of \u0027LOF_service.exe\u0027 and \u0027LaborOfficeFree.exe\u0027 located in the \u0027%programfiles(x86)%\\LaborOfficeFree\\\u0027 directory. This user can log in remotely and has root-like privileges."
}
],
"value": "Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of \u0027LOF_service.exe\u0027 and \u0027LaborOfficeFree.exe\u0027 located in the \u0027%programfiles(x86)%\\LaborOfficeFree\\\u0027 directory. This user can log in remotely and has root-like privileges."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-19T11:19:39.311Z",
"orgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
"shortName": "INCIBE"
},
"references": [
{
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Encrypted database credentials in LaborOfficeFree",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "0cbda920-cd7f-484a-8e76-bf7f4b7f4516",
"assignerShortName": "INCIBE",
"cveId": "CVE-2024-1344",
"datePublished": "2024-02-19T11:19:39.311Z",
"dateReserved": "2024-02-08T10:45:29.254Z",
"dateUpdated": "2024-08-19T14:21:03.997Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-1661 (GCVE-0-2024-1661)
Vulnerability from cvelistv5 – Published: 2024-02-20 12:30 – Updated: 2024-08-28 17:55
VLAI
Title
Totolink X6000R shadow hard-coded credentials
Summary
A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254179. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Hard-coded Credentials
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.254179 | vdb-entry |
| https://vuldb.com/?ctiid.254179 | signaturepermissions-required |
| https://github.com/WoodManGitHub/MyCVEs/blob/main… | exploit |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Totolink | X6000R |
Affected:
9.4.0cu.852_B20230719
|
|
| totolink | x6000r_firmware |
Affected:
9.4.0cu.852_b20230719
cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.852_b20230719:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T18:48:21.609Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "VDB-254179 | Totolink X6000R shadow hard-coded credentials",
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://vuldb.com/?id.254179"
},
{
"name": "VDB-254179 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required",
"x_transferred"
],
"url": "https://vuldb.com/?ctiid.254179"
},
{
"tags": [
"exploit",
"x_transferred"
],
"url": "https://github.com/WoodManGitHub/MyCVEs/blob/main/2024-Totolink/X6000R-Hardcoded-Password.md"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.852_b20230719:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "x6000r_firmware",
"vendor": "totolink",
"versions": [
{
"status": "affected",
"version": "9.4.0cu.852_b20230719"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-1661",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-28T17:52:30.848833Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-28T17:55:33.827Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "X6000R",
"vendor": "Totolink",
"versions": [
{
"status": "affected",
"version": "9.4.0cu.852_B20230719"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as problematic was found in Totolink X6000R 9.4.0cu.852_B20230719. Affected by this vulnerability is an unknown functionality of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-254179. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."
},
{
"lang": "de",
"value": "In Totolink X6000R 9.4.0cu.852_B20230719 wurde eine problematische Schwachstelle entdeckt. Hierbei betrifft es unbekannten Programmcode der Datei /etc/shadow. Mit der Manipulation mit unbekannten Daten kann eine hard-coded credentials-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie gilt als schwierig ausnutzbar. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1,
"vectorString": "AV:L/AC:H/Au:S/C:P/I:N/A:N",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-21T11:51:10.953Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-254179 | Totolink X6000R shadow hard-coded credentials",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.254179"
},
{
"name": "VDB-254179 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.254179"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/WoodManGitHub/MyCVEs/blob/main/2024-Totolink/X6000R-Hardcoded-Password.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2024-02-20T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2024-02-20T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2024-02-20T13:31:21.000Z",
"value": "VulDB entry last update"
}
],
"title": "Totolink X6000R shadow hard-coded credentials"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2024-1661",
"datePublished": "2024-02-20T12:30:37.576Z",
"dateReserved": "2024-02-20T12:26:07.867Z",
"dateUpdated": "2024-08-28T17:55:33.827Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-2161 (GCVE-0-2024-2161)
Vulnerability from cvelistv5 – Published: 2024-03-21 06:00 – Updated: 2024-08-02 15:06
VLAI
Title
Use of Hard-coded Credentials in Kiloview NDI N series products API middleware
Summary
Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version 2.02.0227 .
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-798 - Use of Hard-coded Credentials
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://www.kiloview.com/en/support/download/n3-f… | release-notes |
| https://www.kiloview.com/en/support/download/n3-s… | release-notes |
| https://www.kiloview.com/en/support/download/1779/ | release-notes |
| https://www.kiloview.com/en/support/download/n20-… | release-notes |
| https://www.kiloview.com/en/support/download/n30-… | release-notes |
| https://www.kiloview.com/en/support/download/n40/ | release-notes |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Kiloview | NDI |
Unaffected:
N3 Firmware 2.02.0227
Unaffected: N3-s Firmware 2.02.0227 Unaffected: N4 Firmware 2.02.0227 Unaffected: N20 Firmware 2.02.0227 Unaffected: N30 Firmware 2.02.0227 Unaffected: N40 Firmware 2.02.0227 |
|
| kiloview | ndi_n4_firmware |
Affected:
2.02.0227
cpe:2.3:o:kiloview:ndi_n20_firmware:2.02.0227:*:*:*:*:*:*:* cpe:2.3:o:kiloview:ndi_n30_firmware:2.02.0227:*:*:*:*:*:*:* cpe:2.3:o:kiloview:ndi_n3_firmware:2.02.0227:*:*:*:*:*:*:* cpe:2.3:o:kiloview:ndi_n3-s_firmware:2.02.0227:*:*:*:*:*:*:* cpe:2.3:o:kiloview:ndi_n40_firmware:2.02.0227:*:*:*:*:*:*:* cpe:2.3:o:kiloview:ndi_n4_firmware:2.02.0227:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-01T19:03:39.093Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"tags": [
"release-notes",
"x_transferred"
],
"url": "https://www.kiloview.com/en/support/download/n40/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:o:kiloview:ndi_n20_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n30_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n3_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n3-s_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n40_firmware:2.02.0227:*:*:*:*:*:*:*",
"cpe:2.3:o:kiloview:ndi_n4_firmware:2.02.0227:*:*:*:*:*:*:*"
],
"defaultStatus": "affected",
"product": "ndi_n4_firmware",
"vendor": "kiloview",
"versions": [
{
"status": "affected",
"version": "2.02.0227"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-2161",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-02T15:00:37.605387Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-02T15:06:30.673Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "NDI",
"vendor": "Kiloview",
"versions": [
{
"status": "unaffected",
"version": "N3 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N3-s Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N4 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N20 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N30 Firmware 2.02.0227"
},
{
"status": "unaffected",
"version": "N40 Firmware 2.02.0227"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Milan Duric, EBU"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authentication\u003cp\u003eThis issue affects\u0026nbsp;Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version\u0026nbsp;2.02.0227 .\u003c/p\u003e"
}
],
"value": "Use of Hard-coded Credentials in Kiloview NDI allows un-authenticated users to bypass authenticationThis issue affects\u00a0Kiloview NDI N3, N3-s, N4, N20, N30, N40 and was fixed in Firmware version\u00a02.02.0227 .\n\n"
}
],
"impacts": [
{
"capecId": "CAPEC-115",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-115 Authentication Bypass"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-798",
"description": "CWE-798 Use of Hard-coded Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-21T06:00:17.957Z",
"orgId": "455daabc-a392-441d-aa46-37d35189897c",
"shortName": "NCSC.ch"
},
"references": [
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n3-for-ndi/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n3-s-firmware-download/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/1779/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n20-firmware-download/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n30-for-ndi/"
},
{
"tags": [
"release-notes"
],
"url": "https://www.kiloview.com/en/support/download/n40/"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Upgrade to the firmware 2.02.0227 or later\u003cbr\u003e"
}
],
"value": "Upgrade to the firmware 2.02.0227 or later\n"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Use of Hard-coded Credentials in Kiloview NDI N series products API middleware",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Restrict access to the \nmanagement interface of all affected Kiloview devices by applying strict firewall rules or other available means.\n\u003cbr\u003e"
}
],
"value": "Restrict access to the \nmanagement interface of all affected Kiloview devices by applying strict firewall rules or other available means.\n\n"
}
],
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c",
"assignerShortName": "NCSC.ch",
"cveId": "CVE-2024-2161",
"datePublished": "2024-03-21T06:00:17.957Z",
"dateReserved": "2024-03-04T13:18:31.014Z",
"dateUpdated": "2024-08-02T15:06:30.673Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Mitigation
Phase: Architecture and Design
Description:
- For outbound authentication: store passwords, keys, and other credentials outside of the code in a strongly-protected, encrypted configuration file or database that is protected from access by all outsiders, including other local users on the same system. Properly protect the key (CWE-320). If you cannot use encryption to protect the file, then make sure that the permissions are as restrictive as possible [REF-7].
- In Windows environments, the Encrypted File System (EFS) may provide some protection.
Mitigation
Phase: Architecture and Design
Description:
- For inbound authentication: Rather than hard-code a default username and password, key, or other authentication credentials for first time logins, utilize a "first login" mode that requires the user to enter a unique strong password or key.
Mitigation
Phase: Architecture and Design
Description:
- If the product must contain hard-coded credentials or they cannot be removed, perform access control checks and limit which entities can access the feature that requires the hard-coded credentials. For example, a feature might only be enabled through the system console instead of through a network connection.
Mitigation
Phase: Architecture and Design
Description:
- For inbound authentication using passwords: apply strong one-way hashes to passwords and store those hashes in a configuration file or database with appropriate access control. That way, theft of the file/database still requires the attacker to try to crack the password. When handling an incoming password during authentication, take the hash of the password and compare it to the saved hash.
- Use randomly assigned salts for each separate hash that is generated. This increases the amount of computation that an attacker needs to conduct a brute-force attack, possibly limiting the effectiveness of the rainbow table method.
Mitigation
Phase: Architecture and Design
Description:
- For front-end to back-end connections: Three solutions are possible, although none are complete.
- The first suggestion involves the use of generated passwords or keys that are changed automatically and must be entered at given time intervals by a system administrator. These passwords will be held in memory and only be valid for the time intervals.
- Next, the passwords or keys should be limited at the back end to only performing actions valid for the front end, as opposed to having full access.
- Finally, the messages sent should be tagged and checksummed with time sensitive values so as to prevent replay-style attacks.
CAPEC-191: Read Sensitive Constants Within an Executable
An adversary engages in activities to discover any sensitive constants present within the compiled code of an executable. These constants may include literal ASCII strings within the file itself, or possibly strings hard-coded into particular routines that can be revealed by code refactoring methods including static and dynamic analysis.
CAPEC-70: Try Common or Default Usernames and Passwords
An adversary may try certain common or default usernames and passwords to gain access into the system and perform unauthorized actions. An adversary may try an intelligent brute force using empty passwords, known vendor default credentials, as well as a dictionary of common usernames and passwords. Many vendor products come preconfigured with default (and thus well-known) usernames and passwords that should be deleted prior to usage in a production environment. It is a common mistake to forget to remove these default login credentials. Another problem is that users would pick very simple (common) passwords (e.g. "secret" or "password") that make it easier for the attacker to gain access to the system compared to using a brute force attack or even a dictionary attack using a full dictionary.