| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| A Unix account has a default, null, blank, or missing password. |
| A Windows NT local user or administrator account has a guessable password. |
| A Windows NT local user or administrator account has a default, null, blank, or missing password. |
| A Windows NT domain user or administrator account has a guessable password. |
| A Windows NT domain user or administrator account has a default, null, blank, or missing password. |
| An account on a router, firewall, or other network device has a guessable password. |
| An account on a router, firewall, or other network device has a default, null, blank, or missing password. |
| A mail server is explicitly configured to allow SMTP mail relay, which allows abuse by spammers. |
| ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. |
| UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. |
| An unrestricted remote trust relationship for Unix systems has been set up, e.g. by using a + sign in /etc/hosts.equiv. |
| A NETBIOS/SMB share password is guessable. |
| A NETBIOS/SMB share password is the default, null, or missing. |
| A system-critical NETBIOS/SMB share has inappropriate access control. |
| The rexec service is running. |
| The rstat/rstatd service is running. |
| The rpc.rquotad service is running. |
| A version of rusers is running that exposes valid user information to any entity on the network. |
| The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. |
| The rwho/rwhod service is running, which exposes machine status and user information. |