Security Vulnerabilities - CVEs Published In April 2017
Lens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for the backdoor user account, and a password of guest for the backdoor guest account.
CVSS Score
9.8
EPSS Score
0.003
Published
2017-04-10
iBaby M6 allows remote attackers to obtain sensitive information, related to the ibabycloud.com service.
CVSS Score
7.5
EPSS Score
0.003
Published
2017-04-10
iBaby M3S has a password of admin for the backdoor admin account.
CVSS Score
9.8
EPSS Score
0.003
Published
2017-04-10
Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service.
CVSS Score
9.8
EPSS Score
0.007
Published
2017-04-10
Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a Settings URL.
CVSS Score
8.8
EPSS Score
0.006
Published
2017-04-10
Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-04-10
Castle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-04-10
Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-04-10
Opsview before 2015-11-06 has XSS via SNMP.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-04-10
Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.
CVSS Score
7.8
EPSS Score
0.0
Published
2017-04-10