Описание
Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.
Уязвимые конфигурации
Конфигурация 1Версия до 2.04.560 (включая)
cpe:2.3:a:cs-technologies:evolution:*:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00089
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-1392
NVD-CWE-Other
Связанные уязвимости
CVSS3: 7.5
github
почти 2 года назад
Default credentials on the Web Interface of Evolution Controller 2.x (123 and 123) allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the password. There is no warning or prompt to ask the user to change the default password.
EPSS
Процентиль: 26%
0.00089
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-1392
NVD-CWE-Other