What’s Vulnerable › Vulnerabilities

CVE-2014-5396

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-08-22 · updated 2026-06-17

Description

The web interface in Schrack Technik microControl with firmware before 1.7.0 (937) has a hardcoded password of not for the "user" account, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected products

• Schrack Technik Microcontrol: all versions
• Schrack Technik Microcontrol Firmware: through 1.7.0

References

• http://seclists.org/fulldisclosure/2014/Jul/40
• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt
• http://seclists.org/fulldisclosure/2014/Jul/40
• https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140710-2_Schrack_Technik_Microcontrol_Multiple_critical_vulnerabilities_v10.txt

Get alerted when CVE-2014-5396 or the next vulnerability affects your stack