10

CVE-2012-6428

Carlo Gavazzi EOS Box Hard-Coded Credentials

The Carlo Gavazzi 
EOS-Box

stores hard-coded passwords in the PHP file of 
the device. By using the hard-coded passwords, attackers can log into 
the device with administrative privileges. This could allow the attacker
 to have unauthorized access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.39% 0.688
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
ics-cert@hq.dhs.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

http://www.us-cert.gov/control_systems/pdf/ICSA-12-354-02.pdf
US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-12-354-02