CWE-259: Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound authentication to external components.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- audi utr dashcamAudi UTR Dashcam Video Stream hard-coded credentials5.3 Medium
- audi universal traffic recorder appAudi Universal Traffic Recorder App FTP Credentials hard-coded password2.1 Low
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials...9.8 Critical
- No product listedOn IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be...8.8 High
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, contain(s) a Use of Hard-coded Password...8.4 High
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials7.7 High
- iroad x5 mobile appIROAD X5 Mobile App API Endpoint hard-coded credentials6.9 Medium
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials6.9 Medium
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0...9.8 Critical
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 APK hard-coded credentials2.4 Low
- trendnet tew-929dru firmwareTRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc...8.0 High
- q-free maxtimeA CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal...9.8 Critical
- welch allyn eli 150c/bur 150c/mlbur 150c resting electrocardiograph, eli 250c/bur 250c resting electrocardiograph, eli 280/bur280/mlbur 280 resting electrocardiograph +1 more +3 moreUse of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices6.4 Medium
- asseco business solutions s.a. wapro erp desktopHardcoded Password in Wapro ERP Desktop9.3 Critical
- e-lins h685, h685f, h700 +6 more +8 moreE-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials6.9 Medium
- free-now freenow, intelligent apps freenow app +1 moreIntelligent Apps Freenow App Keystore SSL.java hard-coded password6.3 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100,...9.3 Critical
- fydeos, fydeos openfyde +1 moreFydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114...9.8 Critical
- vonets vap11g-300 firmwareVONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several...8.0 High
- dover fueling solutions (dfs) progauge maglink lx console, progauge maglink lx4 console, doverfuelingsolutions maglink lx4 console +3 more +5 moreDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded Password9.3 Critical
- runofast cloudcam firmwarerunofast Indoor Security Camera for Baby Monitor has a default password of password for the root...6.5 Medium
- loftware spectrumLoftware Spectrum before 4.6 HF14 uses a Hard-coded Password.9.8 Critical
- totolink ac1200 t8, ac1200 t8 firmware, t8 firmware +2 moreTOTOLINK AC1200 T8 shadow.sample hard-coded password9.2 Critical
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an...7.9 High
- h3c gr-1100-p, gr1100-p firmware +1 moreH3C GR1100-P v100R009 was discovered to use a hardcoded password in /etc/shadow, which allows...9.8 Critical
- gncchome gncc c2 firmwareIdentical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P...6.8 Medium
- dlink dir-300 firmwareD-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.9.8 Critical
- horizoncloud catereaseAn issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly...7.5 High
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 Telnet Service product.ini hard-coded password9.3 Critical
- totolink lr1200, lr1200 firmware +1 moreTOTOLINK LR1200 shadow.sample hard-coded password2.1 Low
- totolink a3000ru, a3000ru firmware +1 moreTOTOLINK A3000RU product.ini hard-coded password5.1 Medium
- totolink a3600r, a3600r firmware +1 moreTOTOLINK A3600R Telnet Service product.ini hard-coded password5.1 Medium
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R shadow.sample hard-coded password2.0 Low
- adtran 834-5 firmware, sdg smartos +1 moreAdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have...7.2 High
- zkteco zkbio cvsecurityZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.9.8 Critical
- levelone wbr-6013, level1 wbr-6013 firmware, level one wbr6013 +1 more +3 moreA hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013...9.8 Critical
- myscada mypromySCADA myPRO Use of Hard-coded Password9.3 Critical
- h3c magic r230, magic r230 firmware +1 moreH3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- fortra filecatalyst direct, filecatalyst workflow +1 moreHard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)7.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded credentials7.1 High
- trendnet tew-814dap, tew-814dap firmware +1 moreTRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability...8.8 High
- terra-master tosHardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to...9.4 Critical
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in the message queueing mechanism that if exploited can lead to the...5.7 Medium
- estomed simple careHardcoded password in Estomed Sp. z o.o. Simple Care software9.3 Critical
- dreryk gabinetHardcoded password in drEryk Gabinet9.3 Critical
- eurosoft przychodnia, eurosoftsp.zo.o eurosoft przychodina +1 moreHardcoded password in Eurosoft Przychodnia9.3 Critical
- carrier lenels2 netbox, lenels2 netbox +1 moreLenelS2 NetBox Hardcoded Credentials8.8 High
- totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.8.8 High
- atarim visual collaboration, wpfeedback atarim – visual feedback, review & ai collaboration +1 moreVisual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials7.5 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Password9.8 Critical
- Show moreLoading…