CWE-259: Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound authentication to external components.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Password9.8 Critical
- linqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is a hardcoded password salt.4.8 Medium
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device...10.0 Critical
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at ...9.8 Critical
- totolink cp450 firmwareTOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password...8.8 High
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware +1 moreD-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability6.3 Medium
- d-link dap-1360, dlink dap-1360 firmware, dap-2020 firmware +2 moreD-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability8.8 High
- sonicwall gms, global management system +1 moreUse of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability...7.5 High
- logint lomag warehouse management, lomag warehouse management +1 moreThe LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard...5.3 Medium
- dymo labelwriter print serverDYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could...8.8 High
- netapp ontap select deploy administration utility, clustered data ontap +1 moreDefault Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility5.4 Medium
- atos openscape desk phone ip 35g eco firmware, openscape desk phone ip 35g firmware, mitel 6905 firmware +13 more +15 moreIn Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).8.8 High
- zlmediakitIncorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote...9.8 Critical
- nec corporation cr2500p, mr01ln, mr02ln +115 more +117 moreUse of Hard-coded Password in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3,...9.8 Critical
- chirp systems accessChirp Systems Chirp Access Use of Hard-coded Password2.3 Low
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password7.5 High
- microsoft edge, edge for android +1 moreMicrosoft Edge for Android (Chromium-based) Information Disclosure Vulnerability4.3 Medium
- ibm storage fusion hciIBM Storage Fusion HCI information disclosure6.5 Medium
- joynext mib3 infotainment unit, preh mib3 firmware +1 moreHard-coded password for access to power controller chip memory3.5 Low
- sonicwall sonicosSonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.7.5 High
- viessmann vitogate 300, vitogate 300 firmware +1 moreViessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password6.3 Medium
- juplink rx4-1500, rx4-1500 firmware +1 moreJuplink RX4-1500 Hard-coded Credential Vulnerability6.3 Medium
- motorola mbts base radio, mbts base radio firmware +1 moreMotorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man...8.4 High
- motorola mbts site controller, mbts site controller firmware +1 moreMotorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site...9.4 Critical
- otcmsOTCMS hard-coded password6.3 Medium
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreAuthentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules6.2 Medium
- kubernetes minikube[minikube] ssh server with default password8.4 High
- cnoa oacnoa OA hard-coded password6.3 Medium
- usr usr-g806, usr-g806 firmware +1 moreUSR USR-G806 Web Management Page hard-coded password9.8 Critical
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...4.3 Medium
- bosswerk inverter, inverter firmware +1 moreDeye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password3.9 Low
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-4544410.0 Critical
- netis netcore router, netis-systems netcore router firmware +1 moreNetis Netcore Router hard-coded password7.3 High
- empress project empresstaoeffect Empress hard-coded password6.3 Medium
- daikin svmpc1, svmpc2 +1 moreDaikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an...9.8 Critical
- mitsubishi electric corporation gx works3Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1...7.5 High
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, mt works2 +2 moreUse of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 all versions allows an...5.6 Medium
- tcl linkhub mesh wifi, linkhub mesh wifi ac1200 +1 moreA hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd...7.5 High
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and...9.8 Critical
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller hard-coded password9.8 Critical
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA hard-coded password vulnerability exists in the console infactory functionality of InHand...4.3 Medium
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Hardcoded Credentials in Charge Controller9.8 Critical
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote...6.8 Medium
- dell cloudlinkDell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A...9.1 Critical
- moxa mxview, mxview network management software +1 moreMoxa MXview Network Management Software9.8 Critical
- qnap qunetswitch, qnap systems inc. qsw-m2116p-2t2s, qnap qsw-m2116p-2t2s firmware +2 moreInsufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch9.6 Critical
- dell data protection advisor, emc data protection advisor +1 moreDell EMC Data Protection Advisor versions 6.4, 6.5 and 18.1 contain an undocumented account with...7.5 High
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking ev.2 firmware +3 more +5 moreA CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4...9.8 Critical
- dlink dir-3040 firmwareA hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D...7.5 High
- dell storage managerQSAN Storage Manager - Use of Hard-coded Password-29.1 Critical
- Show moreLoading…