Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
No reference.
Fri, 31 Jul 2026 05:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation. | This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| Title | Use of default credentials vulnerability | |
| References |
|
|
| Metrics |
cvssV4_0
|
Fri, 31 Jul 2026 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A use of default credentials vulnerability in the Advantech ECU-1251D allows a remote attacker to gain unauthorised access to the device via SSH using the default root account with no password, as documented in the device manual. No prompt or guidance to change these credentials is provided during device configuration, increasing the risk of exploitation. | |
| Title | Use of default credentials vulnerability | |
| References |
| |
| Metrics |
cvssV4_0
|
Subscriptions
No data.
Status: REJECTED
Assigner: CSA
Published:
Updated: 2026-07-31T05:09:14.254Z
Reserved: 2026-04-23T02:58:23.248Z
Link: CVE-2026-6890
No data.
No data.
No data.
OpenCVE Enrichment
No data.
No weakness.