CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- trendnet tn-200, tn-200 firmware +1 moreTRENDnet TN-200 Lighttpd hard-coded key6.3 Medium
- draeger icmhelperDraeger: ICMHelper is vulnerable to use of Hard-coded Cryptographic Key5.5 Medium
- dell ecs, objectscale, elastic cloud storage +2 moreDell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded...8.4 High
- dell enterprise sonic osDell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An...7.5 High
- commscope ruckus network director, ruckus network director +1 moreRUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker...9.0 Critical
- hp poly clariti managerPoly Clariti Manager - Multiple Security Vulnerabilities5.9 Medium
- hmailserverUse of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows...4.6 Medium
- hmailserverUse of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows...4.6 Medium
- abb rmc-100, rmc-100 lite +1 moreHard Coded Key used for AES encryption6.3 Medium
- abb rmc-100, rmc-100 lite +1 moreAuthentication Bypass to the MQTT configuration Web Interface6.3 Medium
- gooaclok819 sublinkxgooaclok819 sublinkX jwt.go hard-coded key6.3 Medium
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...8.8 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local...7.3 High
- ivanti workspace controlA hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated...8.8 High
- arris vip1113Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of...4.3 Medium
- perfree perfreeblogPerfreeBlog JWT JwtUtil hard-coded key6.3 Medium
- echarge hardy barth cph2 / cpp2 charging stationsHard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stations6.5 Medium
- itech ilabclientitech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient...7.7 High
- connectwise risk assessmentHardcoded Key Revealed in ConnectWise Password Encryption Utility6.0 Medium
- zkteco zkbio cvsecurityIn ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the...6.5 Medium
- mojoliciousMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default8.1 High
- i-pro co., ltd. configuration toolUse of hard-coded cryptographic key vulnerability in i-PRO Configuration Tool affects the network...6.8 Medium
- donknap dpanelDpanel's hard-coded JWT secret leads to remote code execution9.8 Critical
- open, inc. bizrobo!Use of hard-coded cryptographic key issue exists in BizRobo! all versions. Credentials inside...3.7 Low
- fastcms project fastcmsFastCMS JWT hard-coded key2.3 Low
- gladinet centrestackGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization...9.0 Critical
- vyosVyOS 1.3 through 1.5 or any Debian-based system using dropbear in combination with live-build has...9.0 Critical
- mnx smartosSmartOS, as used in Triton Data Center and other products, has static host SSH keys in the...8.3 High
- fortinet fortisandboxA Use of Hard-coded Cryptographic Key vulnerability [CWE-321] in FortiSandbox version 4.4.6 and...7.8 High
- uxper civi, civi - job board & freelance marketplace wordpress theme +1 moreCivi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure7.3 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...9.8 Critical
- q-free maxtimeA CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or...8.8 High
- fortinet fortimanager, fortimanager cloud +1 moreA use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in...3.9 Low
- ivanti connect secure, policy secure +1 moreA hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before...6.0 Medium
- solarwinds web help deskSolarWinds Web Help Desk Cryptographic Key Management Vulnerability5.5 Medium
- tp-link tapo c500 v1 wi-fi camera, tapo c500 v2 wi-fi camera +1 moreInformation Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera7.0 High
- audiocodes one voice operations centerAn issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582. Due to...7.5 High
- 2n access commanderSuccessful exploitation of this vulnerability could allow an attacker (who needs to have Admin...6.0 Medium
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums static BLE GATT encryption key5.3 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all...3.2 Low
- fortinet fortiswitchA use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2...9.6 Critical
- logsign unified secops platform, unified secops +1 moreLogsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability8.8 High
- aiphone co., ltd. ix-ba, ix-bau, ix-bb +53 more +55 moreUse of hard-coded cryptographic key issue exists in AIPHONE IX SYSTEM, IXG SYSTEM, and System...5.4 Medium
- epark, inc. kura sushi official app produced by eparkUse of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK"...4.0 Medium
- trcore dvcTRCore DVC - Use of Hard-coded Cryptographic Key6.2 Medium
- seimens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...6.9 Medium
- mariazevedo88 travels-java-apimariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key2.3 Low
- ibm maximo application suite - monitor component, maximo application suite +1 moreIBM Maximo Application Suite - Monitor Component information disclosure5.9 Medium
- cisco ucs central software, unified computing system central software +1 moreCisco UCS Central Software Configuration Backup Static Key Vulnerability6.3 Medium
- cisco catalyst center, digital network architecture center (dna center), digital network architecture center +2 moreCisco Catalyst Center Static SSH Host Key Vulnerability7.5 High
- Show moreLoading…