CWE-1391: Use of Weak Credentials
The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +12 more +14 moreMB connect line/Helmholz: Generation of weak passwords vulnerability7.5 High
- notfound mobile, rocketchat rocket.chat +1 moreThe E2EE password entropy generated by Rocket.Chat Mobile prior to version 4.5.1 is insufficient,...6.7 Medium
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secret8.7 High
- firewalla box softwareFirewalla BTLE Weak Credentials7.1 High
- splashtop streamerThe MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with...7.8 High
- johnson controls software house c•cure 9000, johnsoncontrols software house c-cure 9000 +1 moreJohnson Controls Software House C●CURE 9000 installer password strength7.7 High
- longse technology lbh30fe200w, zamel zmb-01, zmb-01/c +2 moreLongse model LBH30FE200W cameras, as well as products based on this device, make use of telnet...8.6 High
- cisolutions ci out of office managerci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.6.5 Medium
- atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, mitel 6905 firmware +13 more +15 moreIn Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).8.8 High
- dji matrice 300, matrice m30, mavic 3 +4 more +6 moreA Use of Weak Credentials vulnerability affecting the Wi-Fi network generated by a set of DJI...6.6 Medium
- kddi corporation hgw bl1500hmHGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network...6.5 Medium
- kddi corporation hgw bl1500hm, kddi hgw bli500hm firmware +1 moreHGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network...8.8 High
- gessler gmbh web-master, gesslergmbh web-master firmware +1 moreUse of Hard-coded Credentials in Gessler GmbH WEB-MASTER9.8 Critical
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to access sensitive data inside exported packages or...7.8 High
- priva top control suite, topcontrol suite - bacnet, topcontrol suite - blue id +3 more +5 morePredictable SSH credentials in Priva TopControl Suite7.5 High
- f5 big-ip, big-ip 10200v-f firmware, big-ip 10350v-f firmware +28 more +30 moreBIG-IP FIPS HSM password vulnerability CVE-2023-34706.0 Medium
- icewhale casaosWeak json web token (JWT) secrets in CasaOS9.8 Critical
- abb matrix series, nexus series, abb ltd. aspect®-enterprise +19 more +21 morePrivilege escalation to root7.8 High
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-467387.2 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro versions prior to 7.2 have their own locally...8.3 High
- tp-link t2600g-28sq firmware, tp-link corporation limited t2600g-28sq +1 moreTP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227...5.7 Medium
- moodleMoodle Temporary Passwords are Brute Force-able7.5 High