CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- siemens scalance x-200 switch family (incl. siplus net variants), scalance x-200irt switch family (incl. siplus net variants), scalance x-200rna switch family +66 more +68 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...5.9 Medium
- siemens logo! 8 bm (incl. siplus variants), logo! soft comfort, logo\! 8 bm firmware +2 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3),...7.7 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....5.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo! soft comfort, logo\! 8 bm firmware +1 more +3 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3),...5.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- redhat.com rhacm, redhat advanced cluster management for kubernetes +1 moreA flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were...3.5 Low
- august connect firmware, home, connect wi-fi bridge firmware +1 more +3 moreUse of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App3.5 Low
- gfi software helpdeskThis improper access control vulnerability in Helpdesk allows attackers to get control of QNAP...9.8 Critical
- kiali, redhat openshift service mesh +1 moreHard coded cryptographic key in Kiali8.6 High
- tp-link archer a7, ac1750 firmware +1 moreThis vulnerability allows network-adjacent attackers execute arbitrary code on affected...8.1 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded...7.5 High
- moxa pt-7528-12msc-12tx-4gsfp-hv-hv firmware, pt-7528-12msc-12tx-4gsfp-hv firmware, pt-7528-12msc-12tx-4gsfp-wv-wv firmware +52 more +54 moreIn Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9...7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...9.8 Critical
- moxa awk-3131a firmware, moxa +1 moreThe usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the...7.5 High
- minerstat msosminerstat msOS before 2019-10-23 does not have a unique SSH key for each instance of the product.9.8 Critical
- siemens simatic it uadmA vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated...6.5 Medium
- moxa edr-810 firmwareMoxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to...4.3 Medium
- redlion crimsonRed Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a...6.5 Medium
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of hardcoded RC2 key6.8 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Project data stored on the...7.5 High
- elastic cloud enterprise (ece), cloud enterprise +1 moreIn Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used...5.9 Medium
- canonical cloud-initThe default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0"...4.6 Medium
- juniper contrail service orchestrationContrail Service Orchestration: hardcoded cryptographic certificates and keys9.8 Critical
- red lion controls sixnet-managed industrial switches, automationdirect stride-managed ethernet switch models, redlion sixnet-managed industrial switches firmware +1 more +3 moreA hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed...10.0 Critical
- boston scientific zoom latitude prm, bostonscientific zoom latitude prm 3120 firmware +1 moreBoston Scientific ZOOM LATITUDE PRM Model 3120 uses a hard-coded cryptographic key to encrypt PHI...4.6 Medium
- korenix jetnet5018g firmware, jetnet5310g firmware, jetnet5428g-2g-2fx firmware +6 more +8 moreA Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version...9.8 Critical
- mirion technologies dmc 3000 firmware, drm-1\/2 firmware, ipam transmitter f\/dmc 2000 firmware +4 more +6 moreA Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000...5.0 Medium
- hyundai blue linkA Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9...7.5 High
- schneider-electric somachine, modicon tm221ce16r firmware +1 moreSchneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3...9.8 Critical
- apache shiro, aurora, redhat fuse +1 more +3 moreImproper Access Control in Apache Shiro9.8 Critical
- hospira mednetHospira MedNet Use of Hard-coded Cryptographic Key6.8
- ge multilink ml800, multilink ml810, ml810/3000/3100 series switch +13 more +15 moreGE Multilink Use of Hard-coded Cryptographic Key10.0
- apache tomcatUse of Hard-coded Cryptographic Key in Apache Tomcat4.3 Medium