CVE-2014-5396 Information

Description

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the \user\ account which makes it easier for remote attackers to obtain access via unspecified vectors.

Reference

http://seclists.org/fulldisclosure/2014/Jul/40 https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt