- Vendor / Project
- EyesOfNetwork
- Product
- EyesOfNetwork
- Date added
- Nov 3, 2021
- Due date
- May 3, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-798
Description
EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.
Required action
Apply updates per vendor instructions.