CVE-2026-65313

Katalog CVE

CVSS 8.1 · High EPSS 0,27%

Kerentanan Use of Hard-coded Credentials. Skor CVSS 3.1 8.1 (High) menurut cyberdanube.com.

Deskripsi (NVD)

A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VNC access to affected workstations.

Rincian

Terbit di NVD

31 Juli 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Deferred

CVSS 3.1

8.1 (High), sumber cyberdanube.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials
CWE-1392: Use of Default Credentials

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,1% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.andritz.com/