CWE-1188: Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.
A kind of CWE-1419 Incorrect Initialization of Resource.
From the CWE List. © The MITRE Corporation.
Newest
- versa director, versa-networks versa director +1 moreThe Versa Director software exposes a number of services by default and allow attackers an easy...9.8 Critical
- consilium safety cs5000 fire panelConsilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default9.3 Critical
- smarsh telemessage, telemessage service, tm sgnl +2 moreThe TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap...5.3 Medium
- donetickDonetick Has Weak Default JWT Secret9.1 Critical
- siemens iec 1ph 7.4kw child socket, iec 1ph 7.4kw child socket/ shutter, iec 1ph 7.4kw parent cable 7m +29 more +31 moreA vulnerability has been identified in IEC 1Ph 7.4kW Child socket (8EM1310-2EH04-0GA0) (All...8.7 High
- broadcom bitnami, bitnami\/pgpool +1 more[pgpool] Unauthenticated access to postgres through pgpool9.4 Critical
- k3sCNCF K3s Kubernetes kubelet configuration exposes credentials6.8 Medium
- yokogawa electric corporation cx1000 / cx2000 paperless recorders, dx1000 / dx2000 / dx1000n paperless recorders, dx1000t / dx2000t paperless recorders +5 more +7 moreInsecure default settings for recorder products9.8 Critical
- jetbrains rubymineIn JetBrains RubyMine before 2025.1 remote Interpreter overwrote ports to listen on all interfaces8.3 High
- shopwareShopware's default newsletter opt-in settings allow for mass sign-up abuse6.9 Medium
- schneider electric trio q licensed data radioCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...5.4 Medium
- schneider electric trio q licensed data radioCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...4.1 Medium
- zoom communications, inc workplace apps for windows, zoom meeting software development kit, rooms +2 more +4 moreZoom Workplace Apps for Windows - Insecure Default Variable Initialization2.8 Low
- dell common event enablerDell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource...6.5 Medium
- b&r industrial automation gmbh aprolDefault or Guessable SNMP community names in B&R APROL8.7 High
- arm mbed tls, mbed mbedtls +1 moreMbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have...5.4 Medium
- codesys gateway for windows, edge gateway +1 moreCODESYS (Edge) Gateway for Windows insecure default5.3 Medium
- schneider electric webhmi – deployed with ecostruxure power automation systemCWE-1188: Initialization of a Resource with an Insecure Default vulnerability exists that could...9.8 Critical
- No product listedMage AI insecure default initialization of resource6.3 Medium
- qnap qurouterQHora7.7 High
- linux, linux kernel +1 moreDrivers: hv: vmbus: Fix initialization of device object in vmbus_device_register()5.5 Medium
- No product listedInsecure default configurations in HI-SCAN 6040i Hitrax HX-03-19-I allow authenticated attackers...6.7 Medium
- shadow-maint shadow-utils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreshadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g.,...3.6 Low
- filamentphp filament, filament excel export +1 moreExported files stored in default (`public`) filesystem if not reconfigured in filament2.3 Low
- svakom siime eye firmwareAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. It uses a default SSID value,...4.3 Medium
- asio cplusplus libraryAsio C++ Library before 1.13.0 lacks a fallback error code in the case of SSL_ERROR_SYSCALL with...7.5 High
- forescout secureconnectorDenial of Service in Forescout SecureConnector5.8 Medium
- hcl sametimeHCL Sametime is impacted by insecure services4.0 Medium
- apache solrApache Solr: ConfigSets created during a backup restore command are trusted implicitly8.1 High
- seiko epson corporation web configInsecure initial password configuration issue in SEIKO EPSON Web Config allows a remote...8.1 High
- pure storage flasharray, purestorage purity\/\/fa +1 moreA condition exists in FlashArray Purity whereby a local account intended for initial array...10.0 Critical
- mozilla firefox, firefox esr +1 moreFirefox normally asks for confirmation before asking the operating system to find an application...7.5 High
- overleafInsecure default setting for Server Pro installed via Overleaf toolkit5.4 Medium
- google androidthere is a possible arbitrary read due to an insecure default value. This could lead to local...4.4 Medium
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +6 more +8 morePhoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password8.6 High
- b&r industrial automation automation runtimeIP Forwarding enabled in B&R Automation Runtime5.3 Medium
- ricoh company, ltd. javatm platformInitialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver...7.5 High
- google androidIn onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to...7.8 High
- century systems co., ltd. futurenet nxr-120/c, futurenet nxr-1200, futurenet nxr-125/cx +43 more +45 moreInitialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR...9.1 Critical
- fogprojectNFS server misconfiguration allows file access outside the exported directory6.4 Medium
- linux, linux kernel +1 moredm btree remove: assign new_root only when removal succeeds7.8 High
- matrix-org vodozemacDegraded secret zeroization capabilities in vodozemac2.5 Low
- apache activemqApache ActiveMQ: Jolokia and REST API were not secured with default configuration8.5 High
- bentoml, bentoml bentoml/bentoml +1 moreInsecure Deserialization Leading to RCE in bentoml/bentoml10.0 Critical
- mitel inattend, cmg suite +1 moreA vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4...9.8 Critical
- atsumi oet-213h-bts1Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in...8.3 High
github.com/cometbft/cometbftGoASA-2024-004: Default configuration param for Evidence may limit window of validityNo score- moxa eds-4008 series, eds-4008 firmware, eds-4009 series +11 more +13 moreEDS-4000/G4000 Series IP Forwarding Vulnerability6.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP HTTP Header Can Expose Versions5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has a Stored XSS with Blog entries (Insecure defaults)9.0 Critical
- Show moreLoading…