Vendor
Best Practice Software Bp Premier versions prior to 1.14.1.1128 contain a hardcoded Microsoft SQL Server administrative password that allows remote unauthenticated attackers to execute operating system commands as SYSTEM.