CWE-259: Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound authentication to external components.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- tenda i24 firmwareTenda i24V3.0si V3.0.0.5 Firmware V3.0.0.5 was discovered to contain a hardcoded password...8.4 High
- beetel 777vr1Beetel 777VR1 WPA2 PSK hard-coded credentials2.3 Low
- beetel 777vr1, 777vr1 firmware +1 moreBeetel 777VR1 Web Management hard-coded credentials8.7 High
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)9.3 Critical
- tenda ax12 pro v2, ax12 pro firmware +1 moreTenda AX12 Pro V2 Telnet Service hard-coded credentials9.2 Critical
- automai directorAn issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges and obtain...8.2 High
- tenda 4g03 pro, 4g05, 4g08 +4 more +6 moreTenda i24 Shadow File hard-coded credentials8.5 High
- ksenia security s.p.a. lares, kseniasecurity lares firmware +1 moreKsenia Security lares Home Automation 1.6 Default Credentials Vulnerability9.3 Critical
- tozed zlt m30s, zlt m30s pro +1 moreTOZED ZLT M30S/ZLT M30S PRO Web hard-coded credentials8.7 High
- shsuishang shopsuite modulithshopshsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials6.9 Medium
- kiotviet sync, mykiot kiotviet sync +1 moreKiotViet Sync <= 1.8.5 - Use of Hard-coded Password to Authorization Bypass5.3 Medium
- No product listedA hard-coded weak password vulnerability has been discovered in all Magic-branded devices from...6.5 Medium
- tenda rp3 proTenda RP3 Pro Firmware Update force_upgrade.sh hard-coded password8.4 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini Root Account hard-coded password7.3 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini MQTT Client Certificate furbo_img hard-coded credentials6.3 Medium
- zytec dalian zhuoyun technology central authentication serviceZytec Dalian Zhuoyun Technology Central Authentication Service HTTP Header git hard-coded password6.9 Medium
- apeman id71Apeman ID71 system.ini hard-coded credentials9.3 Critical
- cognex in-sight explorer, in-sight 2000 series, in-sight 7000 series +2 more +4 moreCognex In-Sight Explorer and In-Sight Camera Firmware Use of Hard-coded Password8.6 High
- tenda f1202, f1202 firmware +1 moreTenda F1202 Administrative shadow hard-coded credentials1.8 Low
- tenda w12, w12 firmware +1 moreTenda W12 Administrative shadow hard-coded credentials1.8 Low
- tenda ac9, ac9 firmware +1 moreTenda AC9 Administrative shadow hard-coded credentials2.0 Low
- cudy lt500e, lt500e firmware +1 moreCudy LT500E Web shadow hard-coded password2.0 Low
- dos co., ltd. ss1Use of hard-coded password issue/vulnerability in SS1 Ver.16.0.0.10 and earlier (Media version:16...8.7 High
- fnkvision y215 cctv cameraFNKvision Y215 CCTV Camera Firmware passwd hard-coded credentials8.5 High
- carrental project carrentalyeqifu carRental Druid login.html hard-coded credentials6.9 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 MD5 Hash shadow hard-coded credentials2.0 Low
- commvault commcell, commvault +1 moreUnauthorized API Access Risk6.9 Medium
- tenda ac20, ac20 firmware +1 moreTenda AC20 shadow hard-coded credentials2.0 Low
- linlinjava litemalllinlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials6.3 Medium
- belkin f9k1009, f9k1010 +1 moreBelkin F9K1009/F9K1010 Web Interface hard-coded credentials9.3 Critical
- commscope ruckus network director, ruckus network director +1 moreRUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak,...8.8 High
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, versions prior to 10.6.0.5, contains a Use of Hard-coded Password...2.5 Low
- d-link dir-890l, dlink dir-890l firmware +1 moreD-Link DIR-890L UART Port rgbin hard-coded credentials7.0 High
- teledyne flir fb-series o, flir fh-series id +1 moreTeledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password6.3 Medium
- lb-link bl-ac3600, bl-ac3600 firmware +1 moreLB-LINK BL-AC3600 shadow hard-coded credentials8.5 High
- saltbo zpansaltbo zpan JSON Web Token token.go NewToken hard-coded password6.3 Medium
- sur-fbd cmms cmmsHard-coded Password in SUR-FBD CMMS8.5 High
- done-0 jankDone-0 Jank JWT Token jwt_utils.go hard-coded password6.3 Medium
- mao888 bluebell-plusmao888 bluebell-plus JWT Token jwt.go hard-coded password6.3 Medium
- d-link dcs-7517, dlink dcs-7517 firmware +1 moreD-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password6.3 Medium
- flock safety license plate reader, flocksafety license plate reader firmware +1 moreFlock Safety LPR (License Plate Reader) devices with firmware through 2.2 have a hardcoded...2.2 Low
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have a hardcoded password for a system.2.2 Low
- flock safety gunshot detection devices, flocksafety gunshot detection firmware +1 moreFlock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.2.2 Low
- totolink t10, t10 firmware +1 moreTOTOLINK T10 shadow.sample hard-coded password2.0 Low
- cisco identity services engine, identity services engine software +1 moreISE on AWS Static Credential9.9 Critical
- nucom nc-wr744gNuCom NC-WR744G Console Application hard-coded credentials5.3 Medium
- netwrix directory managerNetwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded...5.3 Medium
- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the...6.5 Medium
- macro-video v380e6 c1 firmwareAn issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302...6.8 Medium
- knime business hubHard-coded password for object store of KNIME Business Hub8.8 High
- Show moreLoading…