ID:9651 - Exploit for Use of hard-coded credentials in eMerge E3-Series - CVE-2019-7265

 
Main Vulnerability Database Exploits ID:9651 - Exploit for Use of hard-coded credentials in eMerge E3-Series - CVE-2019-7265

ID:9651 - Exploit for Use of hard-coded credentials in eMerge E3-Series - CVE-2019-7265

Published: March 26, 2024


Vulnerability identifier: #VU87820
Vulnerability risk: Critical
CVE-ID: CVE-2019-7265
CWE-ID: CWE-798
Exploitation vector: Remote access
Vulnerable software:
eMerge E3-Series

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to gain full access to vulnerable system.

The vulnerability exists due to presence of hard-coded credentials for the root account in application code. A remote unauthenticated attacker can access the affected system using the hard-coded credentials.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.