Vulnerability Spotlight: Hard-coded password vulnerability could allow attacker to completely take over Lenovo Smart Clock
Cisco Talos researchers found that the Lenovo Smart Clock Essential, version 4.9.113, keeps its hardcoded credentials after setup, letting an attacker with network access gain full control of the device over SSH or telnet using a crafted command line...