CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- johnson controls airwallAirwall - Hardcoded Secrets7.0 High
- ibm documentation offlineIBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution5.3 Medium
- lenovo accessories and display managerDuring an internal security assessment, a potential vulnerability was discovered in Lenovo...8.5 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)8.4 High
- siemens logo! soft comfortA vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). Affected products...7.0 High
- sap se businessobjects business intelligence platform (central management server)Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)7.9 High
- tp-link systems inc. eb210 pro(eu1) 1.0, eb210 pro(us1) 1.0, eb810v(eu1) v1.0 +62 more +64 moreSensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices8.5 High
- tobit laboratories ag teamdavidTeamDavid: Weak Cryptography and Insecure Password Storage8.8 High
- zte f689Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product6.5 Medium
- zte f689TLS credential leakage vulnerability in ZTE F689 product5.3 Medium
- acrisure dr-100, karr bt +1 moreUse of hard-coded cryptographic key in Acrisure KARR BT and DR-1007.2 High
- bilin software and informatics consultancy inc. humanist digital human resourcesHardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources9.1 Critical
- geovision inc. gv-as1620 (gv-cloud)Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)9.1 Critical
- geovision inc. gv-as1620 (as-manager)Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)9.1 Critical
- tp link systems inc. omada access points, tp-link omada ds1008x firmware, omada ds1016g firmware +113 more +115 moreHardcoded Cryptographic Keys in TP-Link Omada Adoption Protocol Authentication6.9 Medium
- vps.org zulip templateVPS.org one-click Zulip template deployment instance contains multiple vulnerabilities9.8 Critical
- watchfire bc550, bc750, bc760 +1 more +3 moreHard-coded Cryptographic Key in Watchfire Controllers7.6 High
- gladinet centrestackCentreStack < 17.5 Hardcoded Key Token Forgery RCE9.3 Critical
- quest kace systems management applianceAn issue was discovered in Quest KACE Systems Deployment Appliance (SMA) 11.0.273. It uses a...9.8 Critical
- progress telerik ui for asp.net ajaxUnauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart6.5 Medium
- progress telerik ui for asp.net ajaxRadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX7.5 High
- mohibshaikh clawvetclawvet < 0.7.5 Hard-coded JWT Secret Session Forgery9.3 Critical
- tp-link systems inc. kasa ec71 v4, tp-link kasa ec70 firmware, kasa ec71 firmware +1 more +3 moreHardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC718.6 High
- dataeaseDataEase: Hardcoded JWT Signing Secret in ShareLink8.3 High
- dev kabir enable corsWordPress Enable CORS plugin <= 2.0.3 - Backdoor vulnerability7.4 High
- No product listedLansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key...5.5 Medium
- shenzhen i365-tech co. ltd. setracker2 parental control app (android) package com.tgelec.setrackerSetracker2 Children's Smartwatch Ecosystem Use of hard-coded cryptographic key8.7 High
- netcomm nf20meshNetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass9.2 Critical
- canon eos network setting tool, canon inc. eos network setting tool for macos, eos network setting tool for windows +2 moreUse of hard-coded cryptographic keys in Canon EOS Network Setting Tool Version 1.5.0 or earlier6.9 Medium
- wertheim gmbh safecontroller software for vault rooms (safe deposit locker system)Hard-coded cryptographic key in Wertheim SafeController Software allows decryption of sensitive configuration data6.8 Medium
- wertheim gmbh safecontroller family 65000 hardware for vault rooms (safe deposit locker system - microcontroller)Weak custom cryptography and hard-coded keys in Wertheim SafeController 65000 allow traffic decryption7.1 High
- naxclow ix cam, smart doorbell x3, v720 +1 more +3 moreNaxclow IoT Platform Use of hard-coded cryptographic key9.2 Critical
- aqara com.lumiunited.aqarahome, home +1 moreAqara Home Android SDK hardcoded keys9.1 Critical
- belkin ax1800, gl.inet a1300, axt1800 +5 more +7 moreGL.iNet XE3000 glnassys hard-coded key2.3 Low
- linqi gmbh linqiHardcoded Cryptographic Keys and Weak IV Generation in linqi8.5 High
- gx india earth 2022, earth 1010 +1 moreHardcoded Cryptographic Key Vulnerability in GX Earth ONT Models8.7 High
- acer connect m6e 5g portable wifi router, connect m6e 5g firmware +1 moreFirmware Theft & IMEI Spoofing via Connect-OTA6.9 Medium
- mervinpraison praisonai-platformpraisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset9.8 Critical
- rustfsRustFS: Hard-coded RSA private key in license verifier permits arbitrary license forgery8.7 High
- nvidia dgx os, dgx spark +1 moreNVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of...8.1 High
- haxtheweb haxcms-nodejsHAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation9.3 Critical
- apache ofbizApache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection9.1 Critical
- sanluan publiccmsSanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key6.9 Medium
- elecom co.,ltd. wrc-x1800gs-b, wrc-x1800gsa-b, wrc-x1800gsh-b +10 more +12 moreELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups...6.9 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through...2.1 Low
- siemens blueplanet 100 nx3 m8, blueplanet 100 tl3 gen2, blueplanet 105 tl3 +27 more +29 moreA vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3...7.2 High
- meari com.meari.sdkMeari SDK hardcoded cryptographic keys8.6 High
- industrial application software ias canias erpIndustrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key6.9 Medium
- watchguard agentUsage of a hard-coded cryptographic key in WatchGuard Agent allows inclusion of code into existing process8.5 High
- cdac-noida e-sushrut, hospital management information system (hmis)Information Disclosure Vulnerability in e-Sushrut HMIS8.7 High
- Show moreLoading…