CVE-2017-12928

—

CVSS 3.0

9.8 critical

EPSS

3%p86

Published

Sep 21, 2017 (Sep 21, 2017)

Modified

Jun 17, 2026

Description

A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and escalate privileges to root access with the same credentials.

Vendors: tecnovision
Products: dlx spot player4
Weakness: CWE-798
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news0 stories

No ingested article mentions this CVE yet.