Description (CNA)
Hard-coded credentials in Web-UI of multiple VARTA Storage products in multiple versions allows an unauthorized attacker to gain administrative access to the Web-UI via network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| VARTA Storage / Element backup | affected 0 before F21000400 |
| VARTA Storage / Element S1 | affected 0 before 2e.3.8.0 |
| VARTA Storage / Element S2 | affected 0 before 2e.3.8.0 |
| VARTA Storage / Element S2 | affected 0 before 2e.3.8.0 |
| VARTA Storage / Element S3 | affected 0 before 2e.3.8.0 |
| VARTA Storage / Element S3 | affected 0 before 2e.4.4.0 |
| VARTA Storage / Element S4 | affected 0 before D21010400 |
| VARTA Storage / One L/XL | affected 0 before 2e.3.8.0 |
| VARTA Storage / Pulse (not pulse neo) | affected 0 before C21010800 |
CWE
CWE-798
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.