CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- axis osAXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific...5.3 Medium
- synopsys code dxImpersonation through User-Controlled Token9.8 Critical
- mgt-commerce cloudpanelMGT-COMMERCE CloudPanel Shared Certificate8.1 High
- panindex project panindexPanindex uses hard coded cyptographic key9.8 Critical
- akuvok e11, akuvox e11 firmware +1 moreCVE-2023-03556.5 Medium
- cisco fxos, unified computing system (managed), ucs 6200 firmware +10 more +12 moreCisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability6.3 Medium
- microsoft sql server, sql server 2012 for x64-based systems service pack 4 (qfe), sql server 2012 service pack 4 (qfe) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.8 High
- dell supportassist for business pcs, supportassist for home pcs, supportassist client consumer +2 moreDell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs ...5.5 Medium
- cisco industrial network directorA vulnerability in the monitoring application of Cisco Industrial Network Director could allow an...8.8 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.0 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password...8.4 High
- rapid7 insightvm, insightvm virtual appliance, nexpose virtual appliance +2 moreRapid7 Nexpose Virtual Appliance Duplicate SSH Host Key7.7 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.0 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.4 High
- zoom rooms, zoom video communications inc rooms for macos +1 moreInsecure key generation for Zoom Rooms for macOS Clients4.4 Medium
- delta electronics industrial automation dialink, deltaww dialink +1 moreDelta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a...9.8 Critical
- horner automation remote compact controller (rcc) 972, hornerautomation rcc972 firmware +1 moreHorner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device...9.8 Critical
- mitsubishi electric corporation gx works3, motion control setting(gx works3 related software) +1 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...9.1 Critical
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, motion control setting(gx works3 related software) +1 more +3 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- cisco secure email, secure email and web manager, secure web appliance +1 more +3 moreA vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco...4.7 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500 firmware +1 moreHard-coded TLS Certificate5.8 Medium
- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An...7.5 High
- device42 cmdbHardcoded encryption key IV in Exago WebReportsApi.dll7.1 High
- ovarro tbox, twinsoft, tbox lt2-530 firmware +6 more +8 moreOvarro TBox Use of Hard-coded Cryptographic Key7.5 High
- pagerduty rundeckUse of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise9.1 Critical
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and...7.5 High
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreAn information disclosure vulnerability exists in the router configuration export functionality...6.3 Medium
- cisco umbrella virtual appliance, umbrella insights virtual appliance +1 moreCisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability7.5 High
- databasir project databasirDatabasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.7.4 High
- ge reason rt43x clocks, rt430 firmware, rt431 firmware +1 more +3 moreGE Reason RT43X Clocks Use of Hard-coded Cryptographic Key5.3 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key5.3 Medium
- gravitl netmakerUse of Hard-coded Cryptographic Key in Netmaker7.2 High
- gravitl gravitl/netmaker, netmaker +1 moreUse of Hard-coded Cryptographic Key in gravitl/netmaker8.8 High
- advantech adam-3600, adam-3600 firmware +1 moreAdvantech ADAM-36009.8 Critical
- reolink rlc-410w firmwareAn information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W...7.5 High
- bosch amc2, access management system, access professional edition +5 more +7 moreUse of Hard-coded Cryptographic Key5.7 Medium
- philips patient information center ix (pic ix), patient information center ix +1 morePhilips Patient Information Center iX (PIC iX) and Efficia CM Series Use of Hard-coded Cryptographic Key6.1 Medium
- dell powerpath management applianceDell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded...8.2 High
- cisco policy suite, policy suite (cps) software +1 moreCisco Policy Suite Static SSH Keys Vulnerability9.8 Critical
- auvesy versiondogAUVESY Versiondog8.2 High
- dell storage managerQSAN Storage Manager - Use of Hard-coded Cryptographic Key9.8 Critical
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in...5.5 Medium
- siemens siveillance video open network bridgeA vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3),...8.8 High
- siemens opcenter quality, qms automotive +1 moreA vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive ...9.8 Critical
- juniper junos, juniper networks junos os +1 morecSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.8.1 High
- cnesty helpcomHelpcom before v10.0 contains a file download and execution vulnerability caused by storing...8.0 High
- reolink rlc-410 firmware, rlc-422 firmware, rlc-423 firmware +7 more +9 moreReolink P2P Cameras7.8 High
- siemens scalance x-200rna switch family, scalance x-300 switch family (incl. x408 and siplus net variants), scalance xr324-12m firmware +7 more +9 moreA vulnerability has been identified in SCALANCE X-300 switch family (incl. X408 and SIPLUS NET...5.9 Medium
- Show moreLoading…