CWE-1188: Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
A kind of CWE-1419 Incorrect Initialization of Resource.
From the CWE List. © The MITRE Corporation.
Newest
- acuitybrands nlight eclypse system controller firmwarenLight ECLYPSE (nECY) system Controllers running software prior to 1.17.21245.754 contain a...8.6 High
- intel atom c3000, atom c3308, atom c3336 +1,061 more +1,063 moreInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged...6.7 Medium
- learning digital orca hcmLearningdigital.com, Inc. Orca HCM - Hard-code password9.8 Critical
- depstech wifi digital microscope 3 firmwareDEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of...6.5 Medium
- intel atom c3000, atom c3308, atom c3336 +1,061 more +1,063 moreInsecure default variable initialization for the Intel BSSA DFT feature may allow a privileged...6.7 Medium
- tieline ip audtio gateway firmwareTieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A...9.8 Critical
- dlink dir-2640-us firmwareD-Link DIR-2640-US 1.01B04 is vulnerable to Incorrect Access Control. Router ac2600 (dir-2640-us)...8.1 High
- google androidIn permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast...7.8 High
- dell emc integrated system for microsoft azure stack hub, emc integrated system for microsoft azure stack hub firmware +1 moreDell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an...8.0 High
- cohesity dataplatformUndocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6...9.8 Critical
- google androidIn LK, there is a possible escalation of privilege due to an insecure default value. This could...6.6 Medium
- svakom siime eye firmwareAn issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. By sending a set_params...6.8 Medium
- psypraxAn issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the...8.1 High
- tk-star q90 junior gps horloge firmwareAn issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. It performs...7.5 High
- google androidIn addWindow of WindowManagerService.java, there is a possible window overlay attack due to an...7.8 High
- google androidIn the Broadcom Nexus firmware, there is an insecure default password. This could lead to local...5.5 Medium
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the...9.8 Critical
- basetech ge-131 bt-1837836 firmwareUse of default credentials for the telnet server in BASETech GE-131 BT-1837836 firmware 20180921...9.8 Critical
- airleader master controlAirleader Master <= 6.21 devices have default credentials that can be used to access the exposed...9.8 Critical
- intel thunderbolt dch driverInsecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows...4.4 Medium
- intel nuc 8 mainstream-g kit nuc8i5inh firmware, nuc 8 mainstream-g kit nuc8i7inh firmware, nuc 8 mainstream-g mini pc nuc8i5inh firmware +20 more +22 moreInsecure default variable initialization in firmware for some Intel(R) NUCs may allow an...7.8 High
- intel converged security and manageability engine, server platform services, trusted execution technology +2 moreInsecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions...6.8 Medium
- apache airflow, airflow's experimental api +1 moreAuthentication bypass in Apache Airflow9.8 Critical
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC...7.5 High
- netgear ex7700 firmwareNETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security...3.3 Low
- google androidIn multiple settings screens, there are possible tapjacking attacks due to an insecure default...8.8 High
- gemteks wrtm-127acn firmware, wrtm-127x9 firmware +1 moreAn issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices....8.8 High
- google androidIn the Settings app, there is an insecure default value. This could lead to local escalation of...7.3 High
- microsoft xamarin.formsXamarin.Forms Spoofing Vulnerability4.7 Medium
- gruntjs grunt, canonical ubuntu linux, debian linux +2 moreArbitrary Code Execution7.1 High
- google androidIn onCreate of BluetoothPairingDialog.java, there is a possible tapjacking vector due to an...7.8 High
- google androidIn onCreate of RequestPermissionActivity.java, there is a possible tapjacking vector due to an...5.5 Medium
- umbraco formsInsecure Defaults5.4 Medium
- aliasrobotics mir1000 firmware, mir100 firmware, mir200 firmware +8 more +10 moreRVD#2569: Insecure operating system defaults in MiR robots10.0 Critical
- lansweeperLansweeper 6.0.x through 7.2.x has a default installation in which the admin password is...9.8 Critical
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreZoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate...9.8 Critical
- argoproj argo cdArgo CD Insecure default administrative password8.8 High
- netgear cg3700b firmwareThe Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character...7.5 High
- netapp fas 8300/8700 and aff a400 baseboard management controller, all flash fabric-attached storage a400 firmware, fabric-attached storage 8300 firmware +1 more +3 moreNetApp FAS 8300/8700 and AFF A400 Baseboard Management Controller (BMC) firmware versions 13.x...7.8 High
- cisco ios xe sd-wan software, ios xe +1 moreCisco IOS XE SD-WAN Software Default Credentials Vulnerability8.4 High
- red hat openshift enterprise, redhat openshift +1 moreThe default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a...9.8 Critical
- dten d5 firmware, d7 firmware +1 moreOn DTEN D5 and D7 before 1.3.4 devices, factory settings allows for firmware reflash and Android...9.8 Critical
- red hat tower, redhat ansible tower, enterprise linux +2 moreA flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3, where...8.2 High
- last.fm desktopThe Last.fm desktop app (Last.fm Scrobbler) through 2.1.39 on macOS makes HTTP requests that...5.3 Medium
- ibm datapower gatewayIBM DataPower Gateway 7.6.0.0-7 throug 6.0.14 and 2018.4.1.0 through 2018.4.1.5 have a default...8.1 High
- google androidIn processPhonebookAccess of CachedBluetoothDevice.java, there is a possible permission bypass...5.5 Medium
- fryskfrysk packages through 2008-08-05 as shipped in Red Hat Enterprise Linux 5 are built with an...7.8 High
- makepasswdmakepasswd 1.10 default settings generate insecure passwords7.5 High
- silver-peak unity edgeconnect sd-wan firmwareSilver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for...9.8 Critical
- alfrescoAn issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated,...9.8 Critical
- Show moreLoading…