CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- juniper contrailContrail: hard coded credentials5.3 Medium
- epson easympThe Epson "EasyMP" software is designed to remotely stream a users computer to supporting...9.8 Critical
- cisco ios xeA vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation...6.8 Medium
- schneider electric se u.motion, schneider-electric u.motion builder +1 moreA vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior...9.8 Critical
- schneider electric se u.motion, schneider-electric u.motion builder +1 moreAn authentication bypass vulnerability exists in Schneider Electric's U.motion Builder software...7.3 High
- xceedium xsuiteMultiple hardcoded credentials in Xsuite 2.x.9.8 Critical
- tecnovision dlx spot player4A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all...9.8 Critical
- mirion technologies dmc 3000 firmware, drm-1\/2 firmware, ipam transmitter f\/dmc 2000 firmware +4 more +6 moreA Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000...5.0 Medium
- twsz wifi repeater firmwareOn BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default)...9.8 Critical
- twsz wifi repeater firmwareOn BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default)...9.8 Critical
- kaltura serverThe getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to...9.8 Critical
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.5 High
- dlink dir-850l firmwareD-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of...9.8 Critical
- axesstel mu553s firmwareAxesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.9.8 Critical
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not...8.1 High
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough...8.1 High
- barracuda load balancerHard coded weak credentials in Barracuda Load Balancer 5.0.0.015.9.8 Critical
- westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 moreA Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0,...5.3 Medium
- westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 moreA Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7...7.5 High
- sma sunny boy 1.5 firmware, sunny boy 2.5 firmware, sunny boy 3.0 firmware +36 more +38 more** DISPUTED ** An Incorrect Password Management issue was discovered in SMA Solar Technology...9.8 Critical
- intercom malion, intercom, inc. malion for windows and mac +1 moreMaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may...9.8 Critical
- i-o data device, inc. wn-g300r3, iodata wn-g300r3 firmware +1 moreWN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an...8.0 High
- i-o data device, inc. wn-ax1167gr, iodata wn-ax1167gr firmware +1 moreWN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an...8.8 High
- trend micro, inc. micro deep discovery director, trendmicro deep discovery director +1 moreBackup archives were found to be encrypted with a static password across different installations,...9.8 Critical
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is...9.8 Critical
- medhost connexMEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer...9.8 Critical
- cisco dpc3939 firmware, dpc3941t firmware +1 moreThe Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a...8.8 High
- medhost document management systemMEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr...9.1 Critical
- medhost document management systemMEDHOST Document Management System contains hard-coded credentials that are used for customer...9.1 Critical
- medhost connexMEDHOST Connex contains hard-coded credentials that are used for customer database access. An...9.8 Critical
- fortinet fortiwlm, fortinet, inc. fortinet fortiwlm +1 moreA hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a...9.8 Critical
- inmarsat amosconnectHard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative...9.8 Critical
- greenpacket dx-350 firmwareGreen Packet DX-350 Firmware version v2.8.9.5-g1.4.8-atheeb has a default password of admin for...9.8 Critical
- dlink dir-615D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which...9.8 Critical
- dell emc vipr srm, emc m\&r, emc storage monitoring and reporting +1 more +3 moreEMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to...9.8 Critical
- juniper junos, juniper networks junos os +1 moreSRX Series: Hardcoded credentials in Integrated UserFW feature.10.0 Critical
- emc esrs policy managerEMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a...9.8 Critical
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreToshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM...9.8 Critical
- bd kla journal service, performa +1 moreA hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA,...9.8 Critical
- marel a320 firmware, a325 firmware, a371 firmware +19 more +21 moreA Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal...9.8 Critical
- foscam c1 webcam firmware, foscan foscam c1 webcam +1 moreHard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12....9.8 Critical
- nagiosThe Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin"...9.8 Critical
- phoenixbroadband poweragent sc3 bms firmwareA Use of Hard-Coded Password issue was discovered in Phoenix Broadband PowerAgent SC3 BMS, all...5.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +7 more +9 moreIn some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may...9.8 Critical
- mimosa backhaul radios, client radios +1 moreA hard-coded credentials issue was discovered on Mimosa Client Radios before 2.2.3, Mimosa...7.5 High
- dahuasecurity dh-hcvr4xxx firmware, dh-hcvr5xxx firmware, dh-ipc-hdbw13a0sn firmware +12 more +14 moreA Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH...7.3 High
- hyundai blue linkA Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9...7.5 High
- wificam wireless ip camera \(p2p\) firmwareWireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with...9.8 Critical
- Show moreLoading…