Monthly
D-Link DHP-W610AV firmware 1.02EUb03 leaves the administrative HNAP password empty in its default configuration, so remote attackers who can reach the management interface can log in without valid credentials and obtain full control of the device. The issue is unauthenticated and requires no user interaction (CVSS 8.9), and publicly available exploit code exists; active exploitation is not confirmed by CISA KEV.
CM2507 IP cameras expose a privileged ONVIF management account that accepts an empty password, allowing anyone who can reach the camera's ONVIF service to log in with no credentials and read privileged device, user, media-profile, and stream configuration data. The flaw is fully remote, unauthenticated, and low complexity (CVSS 4.0 base 8.7; assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality impact and no integrity or availability impact), but its practical reach is bounded by network exposure: the ONVIF service must be directly reachable, which for most deployments means the local LAN segment unless the camera is internet-facing or port-forwarded via UPnP. No public exploit code was identified in the available intelligence and there is no indication of confirmed active exploitation (not listed in CISA KEV); CISA ICS-CERT published advisory ICSA-26-258-08 covering the CareCam HMT CM2507 firmware line.
BMC root account activation without a password on Bull BullSequana XH3406 and XH3515 HPC servers enables full out-of-band management compromise following a factory reset or equivalent triggering operation. With a PoC available (CVSS 4.0 E:P) and no privileges required once the vulnerable state exists, an attacker with access to the BMC management interface can achieve complete control over the managed server, including power cycling, firmware manipulation, and console access. No active exploitation is confirmed in CISA KEV at time of analysis.
Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been found in FAST/TOOLS and CI Server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
D-Link DHP-W610AV firmware 1.02EUb03 leaves the administrative HNAP password empty in its default configuration, so remote attackers who can reach the management interface can log in without valid credentials and obtain full control of the device. The issue is unauthenticated and requires no user interaction (CVSS 8.9), and publicly available exploit code exists; active exploitation is not confirmed by CISA KEV.
CM2507 IP cameras expose a privileged ONVIF management account that accepts an empty password, allowing anyone who can reach the camera's ONVIF service to log in with no credentials and read privileged device, user, media-profile, and stream configuration data. The flaw is fully remote, unauthenticated, and low complexity (CVSS 4.0 base 8.7; assessed CVSS 3.1 AV:N/AC:L/PR:N/UI:N with high confidentiality impact and no integrity or availability impact), but its practical reach is bounded by network exposure: the ONVIF service must be directly reachable, which for most deployments means the local LAN segment unless the camera is internet-facing or port-forwarded via UPnP. No public exploit code was identified in the available intelligence and there is no indication of confirmed active exploitation (not listed in CISA KEV); CISA ICS-CERT published advisory ICSA-26-258-08 covering the CareCam HMT CM2507 firmware line.
BMC root account activation without a password on Bull BullSequana XH3406 and XH3515 HPC servers enables full out-of-band management compromise following a factory reset or equivalent triggering operation. With a PoC available (CVSS 4.0 E:P) and no privileges required once the vulnerable state exists, an attacker with access to the BMC management interface can achieve complete control over the managed server, including power cycling, firmware manipulation, and console access. No active exploitation is confirmed in CISA KEV at time of analysis.
Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Medtronic MyCareLink Patient Monitor has a built-in user account with an empty password, which allows an attacker with physical access to log in with no password and access modify system. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been found in FAST/TOOLS and CI Server. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.