CWE-1392: Use of Default Credentials
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi ops center analyzer viewpoint ovf, ops center common services +1 moreAuthentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF7.1 High
- gnetsystem g-onx firmwareAn issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be...9.8 Critical
- china mobile gt3200-4g4p, gt3200-8g8p, p22g-ciac +2 more +4 moreChina Mobile P22g-CIac CLI su Command default credentials8.6 High
- iroad dash cam x5IROAD Dash Cam X5 SSID default credentials2.3 Low
- thinkware car dashcam f800 proThinkware Car Dashcam F800 Pro Device Registration default credentials1.0 Low
- smartwares c724ip, cip-37210at +1 moreShared credentials in Smartwares cameras7.5 High
- zettler 130.8005A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway...7.6 High
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300) +45 more +47 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90), SIPROTEC...8.7 High
- code-projects employee management systemSourceCodester Employee Management System index.php default credentials6.9 Medium
- fedora repository repository, fedorarepository fcrepo +1 moreFedora Repository fedoraIntCallUser default credentials8.7 High
- fanli2012 native-php-cmsFanli2012 native-php-cms user_recoverpwd.php default credentials6.9 Medium
- four-faith f3x24, f3x36, f3x24 firmware +1 more +3 moreFour-Faith Industrial Router adjust_sys_time OS Command Injection7.2 High
- global wisdom software anchorGlobal Wisdom Software ANCHOR - Undocumented Privileged Account8.4 High
- becton dickinson & co bd bactec™ blood culture system, bd cor™ system, bd epicenter™ microbiology data management system +3 more +5 moreDefault credentials are used in the above listed BD Diagnostic Solutions products. If exploited,...8.0 High
- mobatime network master clock - dts 4801MOBATIME Network Master Clock has a use of default credentials vulnerability9.3 Critical
- hitachi ops center common services, ops center ova +1 moreAuthentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA7.1 High
- faurecia clarion electronics co., ltd. smartplayDefault Credentials in ssh service for SmartPlay in Maruti Suzuki7.4 High
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services information disclosure8.1 High
- dell client platform bios, alienware area 51m r2 firmware, alienware aurora r13 firmware +18 more +20 moreDell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high...8.2 High
- tosei online store management system ネット店舗管理システム, online store management system +1 moreTosei Online Store Management System ネット店舗管理システム Backend default credentials6.9 Medium
- traccar server, traccar +1 moreUse of default credentials at Traccar fleet management solution9.5 Critical
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +6 more +8 morePhoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password8.6 High
- philips vue pacsPhilips Vue PACS Use of Default Credentials5.7 Medium
- red hat service interconnect 1, service interconnect 1 for rhel 9, service interconnect 1.4 for rhel 9 +1 more +3 moreSkupper: potential authentication bypass to skupper console via forged cookies5.3 Medium
- longse technology nvr3608pge2w, zamel zmb-01 +1 moreLongse NVR (Network Video Recorder) model NVR3608PGE2W, as well as products based on this device,...5.3 Medium
- abb aspect enterprise (asp-ent-x), aspect-ent-12 firmware, aspect-ent-256 firmware +19 more +21 moreHard coded default credential contained in install package8.7 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded root password7.4 High
- aten pe6208 firmwareAten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked to change the credentials after first login. If not changed, attackers can log…8.0 High
- netgear prosafe network management systemNETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability7.8 High
- alpitronic hypercharger ev chargeralpitronic Hypercharger EV Charger Use of Default Credentials8.3 High
- cs technologies australia evolution controller, cs-technologies evolution +1 moreDefault credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions9.8 Critical
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Use of Default Credentials7.4 High
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Use of Default Credentials7.4 High
- adtran netvanta 3120 firmwareThe TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has...8.8 High
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate...9.8 Critical
- qbittorrent, qbittorrent client +1 moreqBittorrent Web UI Default Credentials Lead to RCE9.8 Critical
- proscend icr series routers fw, a510-f1 firmware, a510-l1 firmware +18 more +20 moreProscend Advice ICR Series routers fw version 1.7610.0 Critical
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Using default credentials9.8 Critical