CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- hanwha vision co., ltd. device manager, hanwhavision knb-2000 firmware, knb-5000n firmware +254 more +256 moreHardcoding sensitive information6.3 Medium
- ragic enterprise cloud databaseRagic｜Enterprise Cloud Database - Hard-coded Cryptographic Key9.3 Critical
- couchcmsCouchCMS reCAPTCHA config.example.php hard-coded key6.3 Medium
- martialbe one-hubMartialBE one-hub docker-compose.yml hard-coded key6.3 Medium
- apache streamparkApache StreamPark: Use hard-coded key vulnerability9.8 Critical
- advantech wise-deviceon serverAdvantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass10.0 Critical
- opsre go-ldap-adminopsre go-ldap-admin JWT docker-compose.yaml hard-coded key6.3 Medium
- arcadeai arcade-mcpArcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints6.5 Medium
- nocobasenocobase JWT Service jwt-service.ts hard-coded key6.3 Medium
- sge-plc1000 sge-plc50 circutor, circutor sge-plc1000 firmware, sge-plc50 firmware +2 moreUse of hardcoded cryptographic keys in Circutor SGE-PLC1000/SGE-PLC508.6 High
- motogadget mo.lock ignition lockmotogadget mo.lock Ignition Lock NFC hard-coded key1.0 Low
- fuji television network, inc. "fod" app for android, "fod" app for ios +1 more"FOD" App uses hard-coded cryptographic keys, which may allow a local unauthenticated attacker to...5.1 Medium
- apache syncopeApache Syncope: Default AES key used for internal password encryption7.5 High
- lynxtechnology twonky serverHard-coded encryption keys in Twonky Server8.2 High
- astrbotAstrBot is vulnerable to RCE with hard-coded JWT signing keys7.3 High
- sogexiaSogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to...9.1 Critical
- codename065 download managerDownload Manager <= 3.3.30 - Unauthenticated Cron Trigger due to Hardcoded Cron Key5.3 Medium
- phpgurukul news portalPHPGurukul News Portal settings.py hard-coded key2.3 Low
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreMultiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)10.0 Critical
- zte zxmp m721Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product7.7 High
- light & wonder, inc. / shfl entertainment, inc. / shuffle master, inc. deck mate 2Shuffle Master Deck Mate 2 Insecure Update Chain7.0 High
- suse neuvectorNeuVector is shipping cryptographic material into its binary6.5 Medium
- reolinkThe Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt...5.1 Medium
- reolinkThe Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization...5.1 Medium
- berabuddies agentflowFlowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key9.2 Critical
- neojapan inc. desknet's neodesknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an...5.3 Medium
- code-projects hospital management systemcode-projects Hospital Management System express-session hard-coded key6.3 Medium
- newforma project centerNewforma Info Exchange (NIX) shared hard-coded secret key6.3 Medium
- crmebCRMEB JWT HMAC Secret hard-coded key6.3 Medium
- flocksafety flock safetyThe Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for...9.8 Critical
- keysight ixia vision product familyKeysight Ixia Vision Product Family Use of Hard-coded Cryptographic Key8.7 High
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key10.0 Critical
- copypressdev copypress rest apiCopypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution9.8 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE9.4 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded SSL Certificate and Private Keys9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Hardcoded Encryption Private Keys9.2 Critical
- ibm cognos controller, controller +1 moreIBM Controller information disclosure3.7 Low
- unitree b2, g1, go2 +1 more +3 moreUnitree Go2, G1, H1, and B2 devices through 2025-09-20 decrypt BLE packet data by using the...4.7 Medium
- automationdirect click plus c0-0x cpu firmware, click plus c0-1x cpu firmware, click plus c2-x cpu firmware +2 moreAutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key6.9 Medium
- dover fueling solutions progauge maglink lx 4, progauge maglink lx plus, progauge maglink lx ultimate +2 moreDover Fueling Solutions ProGauge MagLink LX 4 Devices Use of Hard-coded Cryptographic Key9.3 Critical
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent hardcoded Blowfish keys7.6 High
- No product listedAn issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4...9.8 Critical
- dji mavic air, mavic mini, mavic spark +2 moreDJI Mavic Spark/Mavic Air/Mavic Mini Telemetry Channel hard-coded key2.3 Low
- running-elephant datartrunning-elephant Datart API AESUtil.java getTokensecret hard-coded key2.3 Low
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded WPA2-PSK2.3 Low
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station Hard-Coded AES Encryption2.3 Low
- bytedance coze-studiocoze-studio aes.go hard-coded key6.3 Medium
- evope coreAn issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the...8.4 High
- welotec eg400mk2-d11001-000101, eg400mk2-d11101-000101, eg500mk2-a11001-000101 +22 more +24 moreegOS WebGUI Hard-Coded JWT Secret Enables Authentication Bypass9.8 Critical
- reolinkReolink v4.54.0.4.20250526 was discovered to contain a hardcoded encryption key and...9.8 Critical
- Show moreLoading…