CWE-261: Weak Encoding for Password
The product uses a weak or trivial encoding for a password.
A kind of CWE-522 Insufficiently Protected Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- zakład ubezpieczeń społecznych płatnik Weak password encoding in Płatnik 7.7 High
- itron mv-90 xi Improperly Stored Credentials 5.3 Medium
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to... 6.3 Medium
- lenovo dock manager During an internal security assessment, an improperly protected key was discovered in Lenovo Dock... 7.0 High
- csl mobile limited 1010 m2m 3g wifi module CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg 6.9 Medium
- redeight cms Weak hashing algorithm in Redeight CMS 5.9 Medium
- dell edge gateway 3000, edge gateway 5000, embedded pc 3000 +8 more +10 more Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated... 5.7 Medium
- centralny instytut ochrony pracy - państwowy instytut badawczy ster Weak password encoding in STER 5.7 Medium
- tinycontrol lk3.9, lk4, tcpdu +1 more +3 more Credentials exposure in tinycontrol devices 8.7 High
- streamsoft prestiż Weak KSeF token encoding in Streamsoft Prestiż 6.3 Medium
- siemens syngo.plaza vb30e A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The... 6.3 Medium
- automationdirect click programmable logic controller AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password 6.1 Medium
- efacec qc 60/90/120 WEEK ENCODING FOR PASSWORDS 6.9 Medium
- strapi Missing Maximum Password Length Validation in Strapi Password Hashing 6.3 Medium
- sato s86-ex 203dpi WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION 6.8 Medium
- apple ipados, ios and ipados, iphone os +2 more A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6... 9.1 Critical
- jtekt electronics corporation hmi viewjet c-more series Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this... 6.5 Medium
- arteche satech bcu, satech bcu firmware +1 more Weak Encoding for Password vulnerability in saTECH BCU 6.9 Medium
- streamsoft prestiż Weak password encoding in Streamsoft Prestiż 8.2 High
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +24 more +26 more MB connect line/Helmholz: Weak encryption of configuration file 8.4 High
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, igs-5225-4up1t2s firmware +4 more +6 more PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords 8.1 High
- advantech adam-5630, adam-5630 firmware +1 more Advantech ADAM-5630 Weak Encoding for Password 6.9 Medium
- advantech adam 5550, adam-5550 firmware +1 more Advantech ADAM-5550 Weak Encoding for Password 6.8 Medium
- authenticator Secret encryption vulnerable to brute-force attacks 8.8 High
- adobe coldfusion ColdFusion | Weak Cryptography for Passwords (CWE-261) 5.5 Medium
- campbell scientific csi web server and rtmc, campbellsci csi web server, rtmc +2 more Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC 6.9 Medium
- enilu web-flash An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via... 8.1 High
- secdiskapp An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower fu… 8.8 High
- commend ws203vicm Commend WS203VICM Weak Encoding for Password 5.7 Medium
- lantronix xport, xport edge firmware +1 more Lantronix XPort Weak Encoding for Password 5.7 Medium
- full compass systems wic1200, xantech wic1200 firmware +1 more Weak Cryptography for Passwords vulnerability on WIC1200 7.1 High
- joynext mib3 infotainment unit, preh mib3 firmware +1 more Weak encoding for password in UDS services 3.3 Low
- eaton easye4, easy-box-e4-ac1 firmware, easy-box-e4-dc1 firmware +20 more +22 more Weak encoding vulnerability in easyE4 6.8 Medium
- mitsubishi electric got2000 series gt27 model, mitsubishi electric corporation got simple series gs25 model, gt designer3 version1 (got2000) +12 more +14 more Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27... 7.5 High
- adobe experience manager, experience manager cloud service +1 more AEM Weak Cryptography for Passwords Security feature bypass 5.3 Medium
- dell powerscale onefs Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A... 6.0 Medium
- dell powerscale onefs, emc powerscale onefs +1 more Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A... 7.8 High
- socomec modulys gp, net vision +1 more SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on... 5.7 Medium
- ge proficy historian An unauthorized user with network access and the decryption key could decrypt sensitive data,... 7.5 High
- nextcloud password policy, kiteworks security-advisories +1 more Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator 2.7 Low
- rockwell automation factorytalk view se, rockwellautomation factorytalk view +1 more The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may... 7.8 High
-
github.com/foxcpp/maddyGo MD5 hash support in github.com/foxcpp/maddy 3.0 Low - dell r1-2210 firmware, r1-2401 firmware, vrtx switch modules +9 more +11 more Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX... 8.8 High
- canonical remote-login-service Insecure crypto for storing passwords 5.5 Medium
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 more This vulnerability allows remote attackers to disclose sensitive information on affected... 5.9 Medium
- easyrobotics er-flex firmware, er-lite firmware, er-one firmware +8 more +10 more RVD#2565: Weak token generation for the REST API. 9.8 Critical
- siemens control center server (ccs), sinvr/sivms video server, sinvr 3 central control server +1 more +3 more A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR... 5.5 Medium
- ge multilin sr 369 motor protection relay firmware, multilin sr 469 motor protection relay firmware, multilin sr 489 generator protection relay firmware +7 more +9 more A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750... 9.8 Critical