CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- xuxueli xxl-jobXuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key6.3 Medium
- milesight ms-c2964-rflpc, ms-c2966-rflwpc, ms-c2966-x12rlpc +79 more +81 moreMilesight Cameras Use of Hard-coded Cryptographic Key9.2 Critical
- datavane datavinesDatavane Datavines JWT Token TokenManager.java hard-coded key6.3 Medium
- liangliangyy djangoblogliangliangyy DjangoBlog File Upload Endpoint settings.py hard-coded key2.3 Low
- silex technology, inc. amc manager, sd-330ac, silextechnology sd-330ac firmware +2 moreSD-330AC and AMC Manager provided by silex technology, Inc. use a hard-coded cryptographic key....6.9 Medium
- liangliangyy djangoblogliangliangyy DjangoBlog Amap API Call views.py hard-coded key6.9 Medium
- anviz cx7 firmwareAnviz CX7 Firmware Use of Hard-coded Cryptographic Key7.7 High
- flowiseFlowise - Weak Default JWT Secrets in Authentication Middleware9.3 Critical
- digital knowledge knowledgedeliverKnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value9.1 Critical
- fortinet forticlientemsA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4...5.2 Medium
- apache openmeetingsApache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt7.5 High
- hcengineering huly platformhcengineering Huly Platform JWT Token token.ts hard-coded key6.3 Medium
- tenda ac10, ac10 firmware +1 moreTenda AC10 RSA 2048-bit Private Key privkeySrv.pem hard-coded key6.9 Medium
- tenda 4g03 pro, 4g03 pro firmware +1 moreTenda 4G03 Pro ECDSA P-256 Private Key server.key hard-coded key6.9 Medium
- belden hirschmann hilcosHirschmann HiLCOS Hard-coded Credentials SSH SSL Keys8.8 High
- investory toy planet trouble appInvestory Toy Planet Trouble App app.investory.toyfactory google-services-desktop.json hard-coded key4.8 Medium
- wahoo fitness systm appWahoo Fitness SYSTM App com.WahooFitness.SYSTM BuildConfig.java hard-coded key4.8 Medium
- noelse individuals & pro appNoelse Individuals & Pro App com.afone.noelse BuildConfig.java hard-coded key4.8 Medium
- propertyguru agentnet singapore appPropertyGuru AgentNet Singapore App com.allproperty.android.agentnet BuildConfig.java hard-coded key4.8 Medium
- align technology my invisalign appAlign Technology My Invisalign App com.aligntech.myinvisalign.emea BuildConfig.java hard-coded key4.8 Medium
- No product listedDialogue App ca.diagram.dialogue config.json hard-coded key4.8 Medium
- grid organiser appGRID Organiser App co.gridapp.organiser app.json hard-coded key4.8 Medium
- rico só vantagem pra investir appRico só vantagem pra investir App br.com.rico.mobile SegmentSettingsModule.java hard-coded key4.8 Medium
- ucc campusconnect appUCC CampusConnect App campusconnect.ucc BuildConfig.java hard-coded key4.8 Medium
- shinrays games goods triple appShinrays Games Goods Triple App cats.goods.sort.sorting.games jRwTX.java hard-coded key2.0 Low
- enter software iperius backupEnter Software Iperius Backup IperiusAccounts.ini hard-coded key2.0 Low
- tp-link archer nx200 firmware, archer nx210 firmware, archer nx500 firmware +12 more +14 moreHardcoded Cryptographic Key in Configuration Encryption Mechanism on TP-Link Archer NX200, NX210, NX500 and NX6008.5 High
- kalcaddle kodboxkalcaddle kodbox Site-level API key shareOut.class.php shareSafeGroup hard-coded key6.3 Medium
- yi technology home cameraYi Technology YI Home Camera WPA/WPS hard-coded key2.3 Low
- No product listedUse of a hard-coded AES-256-CBC key in the configuration backup/restore implementation of Small...9.8 Critical
- perfree go-fastdfs-webperfree go-fastdfs-web Apache Shiro RememberMe ShiroConfig.java rememberMeManager hard-coded key6.3 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty could provide weaker than expected security4.7 Medium
- hp inc edge e, trio 8300, vvx +2 moreSIP Service Providers – Possible Impersonation of Poly Voice Device8.2 High
- unitree upk, go1 air firmware, go1 pro firmware +5 more +7 moreUnitree UPK files Hard-Coded Key7.8 High
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key8.7 High
- commscope ruckus network directorIn RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for...9.8 Critical
- calero verasmartCalero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE9.3 Critical
- wago 0852-1322, 0852-1328 +1 moreHardcoded Key Allows Credential Disclosure9.8 Critical
- infor syteline erpUse of Hard-Coded Cryptographic Key for Password Storage7.1 High
- frangoteam fuxaFUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration9.5 Critical
- frangoteam fuxaDuplicate Advisory: FUXA contains a hard-coded credential vulnerability9.8 Critical
- bambuddyBambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication9.8 Critical
- salesforce marketing cloud engagementHard-coded Cryptographic Key vulnerability in Salesforce Marketing Cloud Engagement (CloudPages,...9.8 Critical
- milner imagedirector captureHardcoded Encryption Key Enables Database Credential Access in Milner ImageDirector Capture8.5 High
- delta electronics diaviewDIAView - Authentication Bypass Vulnerability9.8 Critical
- fabricators vanilla os core imagefabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with othe…6.4 Medium
- pandaxgo pandaxPandaXGO PandaX JWT Secret config.yml hard-coded key6.3 Medium
- actionsky sqleactiontech sqle JWT Secret jwt.go hard-coded key6.3 Medium
- getmaxun maxungetmaxun auth.ts hard-coded key6.3 Medium
- b3log siyuanSiYuan: Information Disclosure and Authentication Bypass via Hardcoded Session Secret6.9 Medium
- Show moreLoading…