CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- icecms project icecmsIceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to...9.8 Critical
- dragonflyoss dragonfly2, linuxfoundation dragonfly +1 moreDragonfly2 vulnerable to hard coded cyptographic key9.8 Critical
- avtec outpost 0810, outpost uploader utility, avtecinc outpost 0810 firmware +2 moreAvtec Outpost Use of Hard-coded Cryptographic Key8.7 High
- journyx, journyx (jtime) +1 moreJournyx Unauthenticated Password Reset Bruteforce8.8 High
- netbirdio netbirdNetBird uses a static initialization vector (IV)7.5 High
- cisco inode, inode manager, intelligent node manager +1 more +3 moreA vulnerability in Cisco Intelligent Node (iNode) Software could allow an unauthenticated, remote...7.5 High
- usbarmory mxs-dcpTEST_KEY used in example dcp_tool reference implementation7.1 High
- anpviz ymf50b firmwareCertain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device. This affects IPC-D250, IPC-D260, IPC-B850, IPC-D850, IPC-D350, IPC-D3150, IPC-D4250, IPC-D380, IPC-D…9.9 Critical
- cisolutions ci out of office managerci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.6.5 Medium
- d-link d-view, dlink d-view 8 +1 moreD-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability9.8 Critical
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Cryptographic Key7.7 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...10.0 Critical
- motorola phonesA hard-coded AES key vulnerability was reported in the Motorola GuideMe application, along with...6.3 Medium
- softing secure integration server, edgeaggregator, edgeconnector +2 moreSofting Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability4.9 Medium
- triangle microworks scada data gatewayTriangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability7.5 High
- d-link d-view, dlink d-view 8 +1 moreD-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability9.8 Critical
- No product listedHiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which...5.7 Medium
- stupidthings.net simpleminingosSimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which...9.1 Critical
- fullzero nvocnvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in...9.8 Critical
- delinea secret serverDelinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP...8.8 High
- juniper cloud native router, crpd, juniper networks, inc. cloud native router (jcnr) +2 more[Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks9.2 Critical
- opentext™ exceed turbo x, opentext exceed turbox +1 moreUse of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions...4.7 Medium
- intumit smartrobotIntumit SmartRobot - Use of Hard-coded Cryptographic Key9.8 Critical
- osuuu lightpictureosuuu LightPicture TokenVerify.php handle hard-coded key5.6 Medium
@nfid/embednpm@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys9.1 Critical- dfinity agent-js, icp-js-core +1 moreagent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`9.1 Critical
- yealink config encrypt tool add rsa, configuration encryption tool +1 moreYealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a...7.5 High
- juanpao jpshopJuanpao JPShop API params.php hard-coded key3.1 Low
- synaptics fingerprint driverEncryption key derived from static host information5.2 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 morePredictable encryption passphrase used in publicly accessible configuration file7.5 High
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Hard-coded Cryptographic Key9.8 Critical
- sierrawireless aleosUse of hardcoded certificate and private key8.1 High
- siemens scalance xb205-3 (sc, pn), 6ag1206-2bb00-7ac2 firmware, 6ag1206-2bs00-7ac2 firmware +172 more +174 moreA vulnerability has been identified in SCALANCE XB205-3 (SC, PN) (All versions < V4.5), SCALANCE...6.9 Medium
- appsanywhere clientSymmetric encryption used to protect messages between the AppsAnywhere server and client can be...8.0 High
- linuxfoundation nats-server, nats nkeys +1 morexkeys Seal encryption used fixed key for all encryption7.5 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key7.1 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreVault Key Partially Predetermined7.8 High
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Hardcoded Credential7.5 High
- metagauss profilegrid, profilegrid – user profiles, groups and communities +1 moreProfileGrid <= 5.5.0 - Hardcoded Encryption Key4.9 Medium
- gravitl netmakerNetmaker has Hardcoded DNS Secret Key7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux5.5 Medium
- kunduz, sifir bes education and informatics kunduz - homework helper app +1 moreHard-coded Cryptographic Key in Kunduz - Homework Helper App9.8 Critical
- deepen bajracharya video conferencing with zoomVideo Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure3.7 Low
- galaxy software services vitals esp, gss vitals enterprise social platform +1 moreGalaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key8.6 High
- iagona scrutiswebIagona ScrutisWeb Use of Hard-coded Cryptographic Key5.5 Medium
- sonicwall analytics, gms, global management system +2 moreUse of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This...7.5 High
- milesight milesightvpnAn authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality...7.3 High
- ami megarac sp-x, megarac spx +1 morehard coded cryptographic key7.1 High
- wpdeveloper embedpress, wpdevteam embedpress – pdf embedder, embed youtube videos, 3d flipbook, social feeds, docs & more +1 moreEmbedPress <= 3.7.3 - Sensitive Information Exposure5.3 Medium
- rockwell automation factorytalk system services, rockwellautomation factorytalk policy manager +1 moreRockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key7.3 High
- Show moreLoading…