{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1078.001 Default Accounts","home_page_url":"https://patchfirst.co/technique/T1078.001/","feed_url":"https://patchfirst.co/feed/technique/T1078.001.json","description":"New and newly exploited CVEs that lead to ATT&CK T1078.001 Default Accounts, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-14510","url":"https://patchfirst.co/cve/CVE-2020-14510/","title":"CVE-2020-14510: OFF-BY-ONE ERROR CWE-193","content_text":"Secomea · GateManager. Not in CISA KEV. EPSS 2.5% (higher than 84.6% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1078.001 Default Accounts; T1059 Command and Scripting Interpreter; T1068 Exploitation for Privilege Escalation. Priority 23.8 of 100.","summary":"OFF-BY-ONE ERROR CWE-193","date_published":"2020-08-25T00:00:00.000Z","date_modified":"2024-09-16T19:25:36.000Z","tags":["T1078.001","T1059","T1068"],"_patchfirst":{"reason":"published","priority":23.8,"kev":null,"epss":{"score":0.02487,"percentile":0.84604},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Secomea","product":"GateManager","techniqueIds":["T1078.001","T1059","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5374","url":"https://patchfirst.co/cve/CVE-2020-5374/","title":"CVE-2020-5374: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","content_text":"Dell · OMIMSSC (OpenManage Integration for Microsoft System Center). Not in CISA KEV. EPSS 1.0% (higher than 64% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078.001 Default Accounts. Priority 19.0 of 100.","summary":"Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…","date_published":"2020-07-14T00:00:00.000Z","date_modified":"2024-09-16T18:43:38.000Z","tags":["T1078.001"],"_patchfirst":{"reason":"published","priority":19,"kev":null,"epss":{"score":0.0104,"percentile":0.63959},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Dell","product":"OMIMSSC (OpenManage Integration for Microsoft System Center)","techniqueIds":["T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5364","url":"https://patchfirst.co/cve/CVE-2020-5364/","title":"CVE-2020-5364: Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078.001 Default Accounts; T1005 Data from Local System. Priority 16.2 of 100.","summary":"Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability","date_published":"2020-05-20T00:00:00.000Z","date_modified":"2024-09-16T19:10:16.000Z","tags":["T1078.001","T1005"],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00985,"percentile":0.62343},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1078.001","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5365","url":"https://patchfirst.co/cve/CVE-2020-5365/","title":"CVE-2020-5365: Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability","content_text":"Dell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1078.001 Default Accounts. Priority 16.2 of 100.","summary":"Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability","date_published":"2020-05-20T00:00:00.000Z","date_modified":"2024-09-16T17:17:39.000Z","tags":["T1110","T1078.001"],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00985,"percentile":0.62343},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Isilon OneFS","techniqueIds":["T1110","T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5231","url":"https://patchfirst.co/cve/CVE-2020-5231/","title":"CVE-2020-5231: Opencast users with ROLE_COURSE_ADMIN can create new users","content_text":"opencast · opencast. Not in CISA KEV. EPSS 0.6% (higher than 49.9% of CVEs). CVSS 4.8 MEDIUM. ATT&CK: T1078.001 Default Accounts; T1136 Create Account. Priority 13.3 of 100.","summary":"Opencast users with ROLE_COURSE_ADMIN can create new users","date_published":"2020-01-30T00:00:00.000Z","date_modified":"2024-08-04T08:22:08.000Z","tags":["T1078.001","T1136"],"_patchfirst":{"reason":"published","priority":13.3,"kev":null,"epss":{"score":0.00625,"percentile":0.49945},"cvss":{"score":4.8,"severity":"MEDIUM","version":"3.1"},"vendor":"opencast","product":"opencast","techniqueIds":["T1078.001","T1136"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-10990","url":"https://patchfirst.co/cve/CVE-2019-10990/","title":"CVE-2019-10990: Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password…","content_text":"Not in CISA KEV. EPSS 1.3% (higher than 71.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1078.001 Default Accounts. Priority 18.8 of 100.","summary":"Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password…","date_published":"2019-09-23T00:00:00.000Z","date_modified":"2026-06-02T20:07:19.000Z","tags":["T1078.001"],"_patchfirst":{"reason":"published","priority":18.8,"kev":null,"epss":{"score":0.01336,"percentile":0.71185},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":null,"product":null,"techniqueIds":["T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-15771","url":"https://patchfirst.co/cve/CVE-2018-15771/","title":"CVE-2018-15771: Dell EMC RecoverPoint Information Disclosure Vulnerability","content_text":"Dell EMC · Dell EMC RecoverPoint. Not in CISA KEV. EPSS 0.4% (higher than 36.1% of CVEs). ATT&CK: T1078.001 Default Accounts; T1005 Data from Local System. Priority 7.2 of 100.","summary":"Dell EMC RecoverPoint Information Disclosure Vulnerability","date_published":"2018-11-13T00:00:00.000Z","date_modified":"2024-09-17T03:58:36.000Z","tags":["T1078.001","T1005"],"_patchfirst":{"reason":"published","priority":7.2,"kev":null,"epss":{"score":0.00417,"percentile":0.36061},"cvss":null,"vendor":"Dell EMC","product":"Dell EMC RecoverPoint","techniqueIds":["T1078.001","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-11062","url":"https://patchfirst.co/cve/CVE-2018-11062/","title":"CVE-2018-11062: Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability","content_text":"Dell EMC · Integrated Data Protection Appliance. Not in CISA KEV. EPSS 1.8% (higher than 78.1% of CVEs). ATT&CK: T1078.001 Default Accounts. Priority 15.6 of 100.","summary":"Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability","date_published":"2018-11-02T00:00:00.000Z","date_modified":"2024-09-16T18:04:27.000Z","tags":["T1078.001"],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.01769,"percentile":0.78091},"cvss":null,"vendor":"Dell EMC","product":"Integrated Data Protection Appliance","techniqueIds":["T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-10633","url":"https://patchfirst.co/cve/CVE-2018-10633/","title":"CVE-2018-10633: Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow…","content_text":"Universal Robots · Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100. Not in CISA KEV. EPSS 1.8% (higher than 78.6% of CVEs). ATT&CK: T1078.001 Default Accounts. Priority 15.7 of 100.","summary":"Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow…","date_published":"2018-07-11T00:00:00.000Z","date_modified":"2024-09-17T01:00:45.000Z","tags":["T1078.001"],"_patchfirst":{"reason":"published","priority":15.7,"kev":null,"epss":{"score":0.01809,"percentile":0.78579},"cvss":null,"vendor":"Universal Robots","product":"Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100","techniqueIds":["T1078.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}