CWE-1392: Use of Default Credentials
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- acronis cyber protect 17, cyber protect cloud agent, agent +1 more +3 moreDefault credentials set for local privileged user in Virtual Appliance. The following products...7.1 High
- eclipse openmqOpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires...9.8 Critical
- shenzhen hongyavision technology co., ltd. (sodola networks) sodola sl902-swtgw124as, sodola-network sl902-swtgw124as firmware +1 moreSODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials9.3 Critical
- tattile s.r.l. smart+, tattile anpr mobile firmware, axle counter firmware +17 more +19 moreTattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials9.3 Critical
- jung enet smart home server, jung-group enet smart home +1 moreJUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials9.3 Critical
- brightsign os series 4 players, os series 5 players +1 moreBrightSign Players Use of Default Credentials8.6 High
- edimax br-6208ac, br-6208ac firmware +1 moreEdimax BR-6208AC auth_check_userpass2 default credentials6.9 Medium
- ziroom zhome a0101Ziroom ZHOME A0101 Dropbear SSH Service default credentials9.2 Critical
- hitachi energy suprosUse of default credentials vulnerability in Hitachi Energy SuprOS product8.8 High
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreWeak Default Passwords in dormakaba access manager9.2 Critical
- dell objectscale, elastic cloud storage +1 moreDell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,...8.8 High
- milner imagedirector captureHard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture6.9 Medium
- adtecdigital signedje digital signage player, admanage traffic & media management application, afiniti multi-carrier platform +8 more +10 moreAdtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials8.7 High
- jm-data onu jf511-tvJM-DATA ONU JF511-TV 1.0.67 Default Credentials Vulnerability9.3 Critical
- microhard systems 3g/4g cellular ethernet and serial gateway default credentials, microhardcorp bullet-3g firmware, bullet-lte firmware +9 more +11 moreMicrohard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass9.3 Critical
- commax co., ltd. cvd-axx dvrCOMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure9.3 Critical
- thermofisher torrent suite softwareThe Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are...9.8 Critical
- vivotek affected device model numbers are fd7131-vvtk,fd7131-vvtk,fd7131-vvtk,fd7141-vvtk,ip7131-vvtk,ip7133-vvtk,ip7133-vvtk,ip7133-vvtk,ip7134-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7135-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7137-vvtk,ip7138-vvtk,ip7142-vvtk,ip7142-vvtk,ip7151-vvtk,ip7152-vvtk,ip7153-vvtk,ip7153-vvtk,ip7154-vvtk,ip7330-vvtk,ip7330-vvtk,ip7330-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131-vvtk,ip8131w-vvtk,pt7135-vvtk,pt7137-tcon,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pt7137-vvtk,pz7131-vvtk,pz7131-vvtk,pz71x1-vvtk,pz71x1-vvtk,pz71x2-vvtk,sd73x3-vvtk,sd73x3-vvtk,sd73x3-vvtk,tc5330-vvtk,tc5332-tcvv,tc5333-tcvv,tc5633-tcvv,tc5633-vvtk,vs7100-vvtk,vs7100-vvtk,vs7100-vvtkUse of default login credentials in Legacy Vivotek Devices9.3 Critical
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreWeak Default Credentials10.0 Critical
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreSNMP Default Community String (public)6.9 Medium
- netbird vpn netbirdAdmin with default credentials in NetBird VPN9.3 Critical
- 70mai x200, x200 firmware +1 more70mai X200 HTTP Web Server default credentials6.9 Medium
- ilevia eve x1 server firmware, ilevia srl. eve x1 server +1 moreIlevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials9.3 Critical
- imonitor software inc. eamInsecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM9.8 Critical
- airship ai acropolisAirship AI Acropolis default credentials9.3 Critical
- bmc control-m/agentBMC Control-M/Agent hardcoded default keystore password5.7 Medium
- baicells nova430e/430i, nova436q, neutrino430, nova846CWE-1392: Use of Default Credentials10.0 Critical
- multicam systems pan-tilt-zoom cameras, multicam-systems mcamii ptz firmware, ptzoptics 12x fixed camera/ndi fixed camera +81 more +83 morePan-Tilt-Zoom cameras default administrative credentials for web interface9.2 Critical
- totolink x2000r, x2000r firmware +1 moreTOTOLINK X2000R Administrative shadow.sample default credentials2.0 Low
- seeedstudio respeaker, linkit smart 7688 firmware +1 moreseeedstudio ReSpeaker Administrative shadow default credentials2.0 Low
- agiloftAgiloft local privilege escalation via default credentials8.7 High
- No product listedDASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to...5.3 Medium
- dlink dsl-7740c firmwareInsecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware...5.3 Medium
- anipaleja nginx-defenderDefault Credentials in nginx-defender Configuration Files6.5 Medium
- palo alto networks cortex xdr broker vmCortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images5.3 Medium
- trendnet ti-g160i, ti-pg102i, tpl-430ap +2 moreTRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials9.3 Critical
- eladminelunez eladmin Druid application-prod.yml default credentials6.9 Medium
- craws openatlasAustrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded...9.8 Critical
- craws openatlasAustrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection...9.1 Critical
- gardyn home kit firmwareAn issue in Gardyn 4 allows a remote attacker to obtain sensitive information and execute...9.1 Critical
- haxtheweb issues, psu haxcms-nodejs +1 moreNodeJS version of the HAX CMS application is distributed with Default Secrets7.3 High
- ruoyiyangzongzhuan RuoYi Druid application-druid.yml default credentials5.3 Medium
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-17114.3 Medium
- safecam x300SAFECAM X300 FTP Service default credentials5.3 Medium
- filebrowserFile Browser Insecurely Handles Passwords5.9 Medium
- 70mai m300, m300 firmware +1 more70mai M300 Telnet Service default credentials8.7 High
- sitecom wlx-2006 firmwareSitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default...6.5 Medium
- sony snc-cs3n, snc-ds10, snc-m1 +4 more +6 moreSony SNC-M1 Administrative Interface default credentials9.2 Critical
- hitachi ops center analyzer viewpointAuthentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF6.5 Medium
- ivanti cloud services appliance, csa (cloud services appliance) +1 moreDefault credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local...7.8 High
- Show moreLoading…