CWE-1393: Use of Default Password
The product uses default passwords for potentially critical functionality.
A kind of CWE-1392 Use of Default Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- axxonsoft axxon one Default Administrator Password Change Not Enforced in Axxon One Web Client 9.2 Critical
- diem-project diem diem-project diem dmDataLoad.php default password 5.3 Medium
- lenovo smart camera c33, smart camera c33 pro, smart camera c35 +9 more +11 more A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the... 6.0 Medium
- triggerdotdev trigger.dev Trigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets 9.2 Critical
- xing inc. cptrans-me-x XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). Anyone with the knowledge of the... 9.3 Critical
- cyber-iii student-management-system sambitraj Student-Management-System aca.sql default password 6.9 Medium
- dassault systèmes tuleap enterprise edition Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 7.7 High
- vps.org zulip template VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities 9.8 Critical
- vps.org supabase template VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities 9.1 Critical
- ciena mcp, navigator ncs, planner plus onprem +2 more Navigator NCS and MCP System Accounts with Default Passwords 9.8 Critical
- vantage6 Vantage6: Set admin user and password from environment or configuration 6.9 Medium
- mbs double-a profibus, double-a x-link, double-x can +16 more +18 more Hardcoded default Password for Service Account 9.3 Critical
- avantra Default credentials for internal DB 5.1 Medium
- juniper virtual lightweight collector, juniper networks jsi lwc +1 more JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access 9.3 Critical
- ibm websphere application server - liberty, websphere application server +1 more IBM WebSphere Application Server Liberty could provide weaker than expected security 6.7 Medium
- harbor Use of hard coded credentials in GoHarbor Harbor 9.4 Critical
- eclipse openmq OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires... 9.8 Critical
- feiyuchuixue sz-boot-parent feiyuchuixue sz-boot-parent Password Reset password default password 5.3 Medium
- mlflow, red hat openshift ai (rhoai) +1 more MLflow Use of Default Password Authentication Bypass Vulnerability 9.8 Critical
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 more Tenda W30E V2 Hardcoded Default Password for Built-in Account 9.3 Critical
- vivotek ip7137, ip7137 firmware +1 more No password set for administrative account in Vivotek IP7137 cameras 9.3 Critical
- liferay dxp, portal, digital experience platform +2 more Liferay Portal Uses Default Password 6.9 Medium
- cudy wr1200ea Cudy WR1200EA shadow default password 2.0 Low
- suse neuvector NeuVector admin account has insecure default password 9.8 Critical
- hp poly clariti manager Poly Clariti Manager - Multiple Security Vulnerabilities 5.9 Medium
- 70mai a510, a510 firmware +1 more 70mai A510 Use of Default Password Authentication Bypass Vulnerability 8.8 High
- zkteco biotime ZKTeco BioTime default password 6.9 Medium
- dell powerscale onefs Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password... 9.8 Critical
- adtran 411 firmware Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords. 9.8 Critical
- netis wf-2404, netis-systems netis wf-2404 firmware +1 more Netis WF-2404 passwd default password 5.4 Medium
- dell smartfabric os10 software, smartfabric os10 +1 more Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an... 8.8 High
- iroad dash cam fx2, iroadau fx2 firmware +1 more IROAD Dash Cam FX2 Device Registration default password 5.3 Medium
- percona monitoring and management An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service... 10.0 Critical
- i-drive i11, i12, i11 firmware +1 more +3 more i-Drive i11/i12 WiFi default password 2.3 Low
- hirsch enterphone mesh The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through... 10.0 Critical
- iocharger firmware for ac models Plaintext default credentials in firmware 8.3 High
- abb matrix series, nexus series, aspect-enterprise +2 more Force Change of Default Credentials 9.3 Critical
- hasomed elefant Unprotected Exposed Firebird Database with default credentials 9.8 Critical
- snipeitapp snipe-it Snipe-IT remote code execution 6.6 Medium
- swissphone dical-red An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file... 6.8 Medium
- acronis cyber infrastructure, cyber infrastructure (aci) +1 more Remote command execution due to use of default passwords. The following products are affected:... 9.8 Critical
- g-sky vehicle management system An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges... 9.8 Critical
- judge0 SSRF into Sandbox Escape through Unsafe Default Configuration 9.1 Critical
- tongtianxing technology co ltd cmsv6 Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through... 9.8 Critical
- ibm storage virtualize IBM Storage Virtualize information disclosure 7.5 High
- connectize ac21000 g6 firmware An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain... 9.8 Critical
- pega platform, pegasystems pega platform +1 more Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default... 9.8 Critical
- pega platform, pegasystems pega platform +1 more Pega platform clients who are using versions 6.1 through 8.8.3 and have upgraded from a version... 8.1 High
- cyberpower powerpanel, powerpanel business management, powerpanel business local / remote +2 more Use of default password vulnerability in CyberPower PowerPanel Business 9.4 Critical
- abb rccmd Use of Default Password 9.6 Critical