CWE-321: Use of Hard-coded Cryptographic Key
The product uses a hard-coded, unchangeable cryptographic key.
A kind of CWE-798 Use of Hard-coded Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- johnson controls advmsUse of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive...8.5 High
- dell command | configure (dcc), command\|configure +1 moreDell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded...6.2 Medium
- schmooze dating mobile applicationInformation Disclosure Vulnerability in Schmooze dating mobile Application9.3 Critical
- lybbn django-vue-lyadminLybbn Django-Vue-Lyadmin JWT Signing settings.py hard-coded key6.9 Medium
- armatura llc one, one (usa) +1 moreArmatura LLC Armatura One Use of Hard-coded Cryptographic Key8.6 High
- johnson controls easyio fs32: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows :...9.3 Critical
- hitachi industrial equipment systems coding software suiteA hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens9.3 Critical
- aja video systems helo plusAJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle8.7 High
- bosch bvmsInformation disclosure in BVMS 4.5 up to 12.38.7 High
- beenuar aisocAiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret8.7 High
- netcore nap930Netcore NAP930 Backup/Restore backup_common.sh hard-coded key5.1 Medium
- f&f filipowski mh-developerUse of Shared Cryptographic Key in mH-DEVELOPER6.3 Medium
- tohoku electric power company, incorporated electric power "yorisou e net" android app, electric power "yorisou e net" ios app +1 moreSmartphone application Tohoku Electric Power "Yorisou e Net" uses a hard-coded cryptographic key,...2.4 Low
- botslab g980hBotslab G980H Dashcams Use of Hard-coded Cryptographic Key6.0 Medium
- termix-ssh termixTermix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy5.5 Medium
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.1 High
- zohocorp manageengine applications managerSensitive data exposure10.0 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities8.0 High
- lxc lxc-cilxc-ci: Pacman keyring stored in archlinux image with a private key7.2 High
- solarwinds access rights managerSolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability8.8 High
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded...8.1 High
- acer system monitoringHard-coded Encryption Key Vulnerability in Acer System Monitoring for NitroSense and PredatorSense Software1.2 Low
- acer agent serviceHard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense4.9 Medium
- qualitysoft corporation qnd advance, qnd premium, qnd standard +2 moreQND uses a hard-coded cryptographic key, which may allow a local attacker who is logged in to a...6.8 Medium
- wärtsilä fos-onboardWärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key9.3 Critical
- wärtsilä fos-onboardWärtsilä FOS-Onboard Use of Hard-coded Cryptographic Key9.5 Critical
- issabel foundation frameworkIssabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate9.3 Critical
- No product listedTenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a hardcoded...7.5 High
- crawlab-team crawlabCrawlab through 0.6.3 Authentication Bypass via Hard-coded JWT Secret9.3 Critical
- dromara orion-visordromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key6.9 Medium
- maxsite cmsMaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key9.3 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...4.4 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...4.4 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...6.5 Medium
- openidc cjoseOpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption9.1 Critical
- aveva pipeline integrity monitorAVEVA Pipeline Integrity Monitor Use of hard-coded cryptographic key8.3 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- liufee feehicmsliufee FeehiCMS Cookie Validation main-local.php hard-coded key5.3 Medium
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys8.5 High
- No product listedPowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256...9.1 Critical
- tp-link systems inc. archer c7 v5, re305 v3 +1 moreHardcoded Shared RSA-1024 Private Key in Web Login in TP-Link RE305 and Archer C76.1 Medium
- wwbn avideoWWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php6.9 Medium
- unknown ctn720-w1, lf-1541, mt7620n +13 more +15 moreZbtlink MQWrt infosrvd Command Injection9.3 Critical
- nvidia unified fabric manager enterprise - ga, unified fabric manager enterprise - lts 2023, unified fabric manager enterprise - lts 2024 +1 more +3 moreNVIDIA UFM Enterprise contains a vulnerability in the session management component, where an...5.1 Medium
- tp-link systems inc. deco xe75 v3 / xe5300 v3.6/ we10800 v3.6Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE108007.7 High
- nektos actact 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend8.7 High
- splunk, splunk enterprise, secure gateway +2 moreUse of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway6.5 Medium
- No product listedAn issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a...9.1 Critical
- Show moreLoading…