Description
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
References
- c5evm-default-account(26763) vdb-entry
- 20378 third-party-advisory
- VU#584329 third-party-advisory
- ADV-2006-2069 vdb-entry
- 1016184 vdb-entry
- http://www.kb.cert.org/vuls/id/WDON-6QAP4D