CVE-2014-5396

HIGH

7.5

CVSS Severity Score

EPSS Score0.1000%

EPSS Percentile14.31th

Published2014年8月22日

Last Modified2026年5月6日

Vulnerability Description

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected Platforms (CPE)

💻

Schrack

Technik Microcontrol Firmware

<= 1.7.0

🔌

Schrack

Technik Microcontrol

All versions

References & Advisories

🔗 http://seclists.org/fulldisclosure/2014/Jul/40

🔗 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt