Daktronics Controller Firmware Use of Hard-coded Credentials
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Daktronics | VFC-DMP-5000 | unaffected |
|
||||||||||||
| Daktronics | DMP-5000 | unaffected |
|
||||||||||||
| Daktronics | DMP-8000 | unaffected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
No data.
| Vendor | Product | Versions | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Daktronics | Dmp-5000 |
|
||||||||||||||||
| Daktronics | Dmp-8000 |
|
||||||||||||||||
| Daktronics | Vfc-dmp-5000 |
|
Vendor Solution
Daktronics recommends users update their device software to one of the following versions (based on product configuration in use): 8.117.0.x, 9.43.0.x, or 10.34.0.x
Vendor Workaround
Daktronics recommends updating the default passwords and encourages using strong, unique credentials per device.
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.569% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Daktronics
Daktronics dmp-5000 Daktronics dmp-8000 Daktronics vfc-dmp-5000 |
|
| Vendors & Products |
Daktronics
Daktronics dmp-5000 Daktronics dmp-8000 Daktronics vfc-dmp-5000 |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access. | |
| Title | Daktronics Controller Firmware Use of Hard-coded Credentials | |
| Weaknesses | CWE-798 | |
| References |
| |
| Metrics |
cvssV3_1
|