CVE-2022-27172

CVSS v3 Score
4.3
Medium
CVSS v2 Score
6.5
Medium

Vulnerability Description

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted network request can lead to privileged operation execution. An attacker can send a sequence of requests to trigger this vulnerability.

CVSS:4.3(Medium)

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versions < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= ...

CVSS:4.3(Medium)

The Chirp Access app contains a hard-coded password, BEACON_PASSWORD. An attacker within Bluetooth range could change configuration settings within the Bluetooth beacon, effectively disabling the appl...

CVSS:4.3(Medium)

Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

CVSS:4.3(Medium)

A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to...

CVSS:4.7(Medium)

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /etc/shadow.sample. The m...

CVSS:4.8(Medium)

An issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.