Base de CVEs

Tyler Identity Local (TID-L) uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed since December 2020, and has not been supported since 2021.

Antes de 2025-11-03, usuários bem-intencionados do Terraform ou da API REST para o Google Cloud AlloyDB for PostgreSQL poderiam ter criado clusters com uma senha padrão insegura, que poderia ser explorada por um atacante remoto para obter acesso administrativo total ao banco de dados. A exploração exigia acesso de rede ao cluster AlloyDB e era limitada ao Terraform ou à API REST, pois os outros clientes a bloqueavam.

Nornicdb é um banco de dados de grafos e vetores distribuído, de baixa latência, com MVCC temporal e busca HNSW em sub-milissegundo, travessia de grafos e escritas. Antes da versão 1.0.42-hotfix, a flag de CLI --address (e NORNICDB_ADDRESS / a chave de configuração server.host) é repassada corretamente ao servidor HTTP, mas nunca chega à configuração do servidor Bolt. Por isso, o listener Bolt sempre se vincula ao endereço curinga (todas as interfaces), independentemente do que o usuário configurar. Em uma LAN, isso expõe o banco de dados de grafos, com suas credenciais padrão admin:password, a qualquer dispositivo que compartilhe a rede. Este problema foi corrigido na versão 1.0.42-hotfix.

SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a default credentials vulnerability that allows remote attackers to obtain administrative access to the management interface. Attackers can authenticate using the hardcoded default credentials without password change enforcement to gain full administrative control of the device.

Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning. An attacker who can reach the management interface can authenticate using the default credentials and gain administrative access, enabling unauthorized access to device configuration and data.

eNet SMART HOME server 2.2.1 and 2.3.1 ships with default credentials (user:user, admin:admin) that remain active after installation and commissioning without enforcing a mandatory password change. Unauthenticated attackers can use these default credentials to gain administrative access to sensitive smart home configuration and control functions.

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced.

JM-DATA ONU JF511-TV version 1.0.67 uses default credentials that allow attackers to gain unauthorized access to the device with administrative privileges.

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclose RTSP stream. Attackers can exploit this by sending a POST request with the 'passkey' parameter set to '1234', allowing them to access the web control panel.

The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide recommends changing default credentials; however, a password change policy for default administrative accounts is not enforced. Many deployments may retain default credentials, in which case an attacker is likely to be able to successfully authenticate with administrative privileges.

Legacy Vivotek Device firmware uses default credetials for the root and user login accounts.

Weak Default Credentials.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

SNMP Default Community String (public).This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.

NetBird VPN when installed using vendor's provided script failed to remove or change default password of an admin account created by ZITADEL. This issue affects instances installed using vendor's provided script. This issue may affect instances created with Docker if the default password was not changed nor the user was removed. This issue has been fixed in version 0.57.0

A vulnerability has been found in 70mai X200 up to 20251010. Affected by this vulnerability is an unknown functionality of the component HTTP Web Server. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.