CVE-2014-5396

High

Published: 22/08/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The web interface in Schrack Technik microControl with firmware before version 1.7.0 (937) has a hardcoded password for the 'user' account. This makes it easier for remote attackers to gain access to the system.

Risk Assessment

The organization is at risk of unauthorized access to the system, which could lead to serious security breaches.

Recommendation

It is recommended to update the firmware to version 1.7.0 or later to remove the hardcoded password and enhance system security.

Other vulnerabilities in Schrack Technik microControl

CVE-2014-8329High
Schrack Technik microControl devices with firmware before version 1.7.0 (937) store sensitive information under the web root with insufficient access control. This allows remote attackers to obtain access data for ftp and telnet services via a direct request for ZTPUsrDtls.txt.

Original NVD description (English source)

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors.