CWE-798

1,721 vulnerabilities with CWE-798

CVE-2019-12376 MEDIUM

Ivanti LANDESK Management Suite <10.0.1.168 - Privilege Escalation

CVSS 4.5

CVE-2019-6725 CRITICAL

ZyXEL P-660HN-T1 V2 2.00(AAKK.3) - Unauthenticated Hard-coded Credential Exposure via rpWLANRedirect.asp

CVSS 9.8

CVE-2019-10850 CRITICAL

Computrols Building Automation Software < 19.0.0 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2019-10851 MEDIUM

Computrols CBAS < 19.0.0 - Use of Hard-coded Encryption Keys

CVSS 6.5

CVE-2019-6812 HIGH

BMX-NOR-0200H Firmware - Use of Hard-coded Credentials via FTP Protocol

CVSS 7.2

CVE-2019-8352 CRITICAL

BMC PATROL Agent < 11.3.01 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2019-6572 CRITICAL

SIMATIC HMI Panels & WinCC < 15.1 - Unauthenticated Sensitive Information Exposure via SNMP

CVSS 9.1

CVE-2019-10920 HIGH

Siemens LOGO! 8 BM Firmware < V8.3 - Unauthenticated Hard-coded Cryptographic Key Exposure via Port 10005/tcp

CVSS 7.5

CVE-2019-6548 CRITICAL

GE Communicator < 4.0.517 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2019-10712 CRITICAL

WAGO Series 750-88x and 750-87x Firmware - Use of Hard-coded Credentials

CVSS 9.8

CVE-2019-3939 CRITICAL

Crestron AM-100 and AM-101 - Unauthenticated Default Credential Access

CVSS 9.8

CVE-2019-3938 HIGH

Crestron AM-100 and AM-101 - Insufficiently Protected Credentials in Configuration Export

CVSS 7.8

CVE-2019-3932 CRITICAL

Crestron AM-100 and AM-101 - Authentication Bypass via Hard-coded Password

CVSS 9.8

CVE-2019-7212 HIGH

SmarterTools SmarterMail <16.x-6985 - Info Disclosure

CVSS 8.2

CVE-2019-10688 MEDIUM

Polycom UC Software <5.8.0 & BToE Connector <3.8.0 - Hard-coded Credentials

CVSS 6.8

CVE-2019-9160 CRITICAL

Sangfor Sundray WLAN Controller < 3.7.4.2 - Backdoor Account and Privilege Escalation via SSH

CVSS 9.8

CVE-2019-9975 HIGH

DASAN H660RM Firmware 1.03-0022 - Use of Hard-coded Credentials for Logs Encryption

CVSS 7.5

CVE-2019-10479 CRITICAL

Glory RBW-100 Firmware ISP-K05-02 7.0.0 - Use of Hard-coded Credentials

CVSS 9.8

CVE-2019-3710 HIGH

Dell EMC Networking OS10 < 10.4.3 - Unauthenticated Use of Hard-coded Cryptographic Keys

CVSS 8.1

CVE-2019-10011 CRITICAL

Jenzabar Internet Campus Solution < 2019-02-06 - Unauthenticated Account Creation via Hardcoded Credentials

CVSS 9.8

CVE-2019-7161 HIGH

Zoho ManageEngine ADSelfService Plus <5.x - Info Disclosure

CVSS 7.5

CVE-2019-3497 HIGH

Wifi-soft UniBox controller 0.x-2.x - Unauthenticated Remote Command Execution via Diagnostic Tools Ping Feature

CVSS 8.8

CVE-2019-3496 HIGH

Wifi-soft UniBox Controller 3.x - Unauthenticated Remote Command Execution via Hard-coded Credentials

CVSS 8.8

CVE-2019-3495 HIGH

Wifi-soft UniBox 0.x-2.x - Unauthenticated Arbitrary File Upload via network/mesh/edit-nds.php

CVSS 8.8

CVE-2019-1723 CRITICAL

Cisco Common Services Platform Collector 2.7.2-2.7.4.6 - Unauthenticated Default Credential Access

CVSS 9.8