https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:20:41 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04980 bdu:2024-04980 https://cve.radiocsirt.org/vuln/bdu:2024-04980 https://cve.radiocsirt.org/vuln/euvd-2026-215823 EUVD-2026-215823 https://cve.radiocsirt.org/vuln/euvd-2026-215823 https://cve.radiocsirt.org/vuln/fkie_cve-2024-36080 <p>Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.</p> <p>Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-36080 https://cve.radiocsirt.org/vuln/ghsa-r73q-v44r-mw6r <p>Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.</p> <p>Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be changed. NOTE: this is a serial-to-Ethernet converter that should not be placed at the edge of the network.</p> https://cve.radiocsirt.org/vuln/ghsa-r73q-v44r-mw6r https://cve.radiocsirt.org/vuln/icsa-24-151-04 <p>Westermo EDW-100 has a hidden administrator account with a hardcoded password. In the firmware package, in &#34;image.bin&#34;, the username root and the password for this account are both hard-coded and exposed as strings that can trivially be extracted. Currently there is no way to change this password. Westermo EDW-100 allows an unauthenticated GET request that can download the configuration-file that contains the configuration, username, and passwords in clear-text.</p> <p>Westermo EDW-100 has a hidden administrator account with a hardcoded password. In the firmware package, in &#34;image.bin&#34;, the username root and the password for this account are both hard-coded and exposed as strings that can trivially be extracted. Currently there is no way to change this password. Westermo EDW-100 allows an unauthenticated GET request that can download the configuration-file that contains the configuration, username, and passwords in clear-text.</p> https://cve.radiocsirt.org/vuln/icsa-24-151-04