CVEvulnerability

CVE-2017-12928

9.8 CRITICAL Published 2017-09-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-09-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-798

Description

A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials.

Affected configurations

• tecnovision dlx spot player4

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References