Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r73j-m9r2-mwv8

Опубликовано: 15 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Default credentials on the Web Interface of Evolution Controller 2.x (123 and 123) allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.

Default credentials on the Web Interface of Evolution Controller 2.x (123 and 123) allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.

EPSS

Процентиль: 26%
0.00089
Низкий

7.5 High

CVSS3

Дефекты

CWE-1392

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.

EPSS

Процентиль: 26%
0.00089
Низкий

7.5 High

CVSS3

Дефекты

CWE-1392