CyberSecBulletin

Precor vulnerabilities

We track 4 vulnerabilities in Precor products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on June 7, 2024.

4vulnerabilities
0critical
4high
0exploited
8.3average CVSS score

Latest Precor vulnerabilities

  • 8.0 High severity

    p82: Use of Hard-coded Credentials

    CVE-2023-49224Precor

    Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file. A remote attacker could use this key to gain root privileges.

  • 8.8 High severity

    p82: Use of Hard-coded Credentials

    CVE-2023-49223Precor

    Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information.

  • 8.8 High severity

    p82: Use of Hard-coded Credentials

    CVE-2023-49222Precor

    Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges.

  • 7.8 High severity

    p82: Use of Hard-coded Credentials

    CVE-2023-49221Precor

    Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and access the service menu, because there is a hard-coded service code.