CVE-2017-12928 | BDVDB-2026-90760 Detail

Description#

A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/144259/DlxSpot-Hardcoded-Password.html

Exploit#

No public exploit known

History#

Version 12017-09-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.