Pentasecurity vulnerabilities
We track 2 vulnerabilities in Pentasecurity products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2022.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Pentasecurity vulnerabilities
- 8.8 High severity
Wapples: Use of Hard-coded Credentials
Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its ex
- 9.8 Critical severity
Wapples: Use of Hard-coded Credentials
WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.