CVE-2017-12574 - An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720

Back Back to CVE browser

CRITICAL

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720

Published Aug 24, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.80%

Description

An issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded credential "supervisor:dangerous" was injected into web authentication database "/.htpasswd" during booting process, which allows attackers to gain unauthorized access and control the device completely; the account can't be modified or deleted.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

http://seclists.org/fulldisclosure/2018/Aug/25
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4146
Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2018/Aug/25		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4146		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 24, 2018

Updated Aug 5, 2024

Reserved Aug 5, 2017

Link CVE-2017-12574

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-12574

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 24, 2018

Updated Aug 5, 2024

Link EUVD-2017-4146

GitHub

No data