CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- zyxel ac3000 firmwareThe Zyxel Multy X (AC3000 Tri-Band WiFi System) device doesn't use a suitable mechanism to...6.8 Medium
- prismaindustriale checkweigher prismawebPrisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discover the hardcoded...9.8 Critical
- cisco ios xeA vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log...9.8 Critical
- tendacn ac15 firmwareA remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router...9.8 Critical
- ge centricity pacs ra1000GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these...9.8 Critical
- ge xelerisGE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are...9.8 Critical
- ge gemnet license server, ge healthcare gemnet license server aka. (echoserver) +1 moreGE GEMNet License server (EchoServer) all current versions are affected these devices use default...9.8 Critical
- ge healthcare infinia, ge infinia hawkeye 4 firmware +1 moreGE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these...9.8 Critical
- docutrac dtisqlinstaller.exe, docutracinc dtisqlinstaller +1 moreDocuTrac DTISQLInstaller.exe Hard-Coded Salt2.9 Low
- docutrac dtisqlinstaller.exe, docutracinc dtisqlinstaller +1 moreDocuTrac DTISQLInstaller.exe Hard-Coded Credentials9.0 Critical
- dell emc emc data protection advisor, emc data protection advisor +1 moreEMC Data Protection Advisor 6.3.x before patch 67 and 6.4.x before patch 130 contains...9.8 Critical
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 10 allows local users to have unspecified impact...8.2 High
- emc data protection advisorDell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection...7.8 High
- schneider electric se pelco sarix professional, schneider-electric ibp1110-1er firmware, ibp219-1er firmware +18 more +20 moreA vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions...9.8 Critical
- industrial.softing fg-100 pb profibus firmwareSofting FG-100 PB PROFIBUS firmware version FG-x00-PB_V2.02.0.00 contains a hardcoded password...9.8 Critical
- dell emc solutions enabler virtual appliance, emc unisphere for vmax virtual appliance, emc vasa virtual appliance +1 more +3 moreA hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC...9.8 Critical
- cisco prime collaboration provisioning, prime collaboration, prime collaboration assurance +2 moreA vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an...8.4 High
- ibm engineering lifecycle optimization - publishing, rational publishing engine +1 moreIBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a...4.4 Medium
- wowza streaming engineAn issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1. The file...9.8 Critical
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. Remote attackers can discover a weakly...9.8 Critical
- - wireless ip camera 360An issue was discovered on Wireless IP Camera 360 devices. A root account with a known SHA-512...9.8 Critical
- seagate blackarmor nas 110 firmware, blackarmor nas 220 firmware +1 morebackupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@#...9.8 Critical
- datto alto 2 firmware, alto 3 firmware, alto imaged firmware +5 more +7 moreDatto ALTO and SIRIS devices have a default VNC password.9.8 Critical
- smiths-medical medfusion 4000 wireless syringe infusion pumpA Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless...7.3 High
- smiths-medical medfusion 4000 wireless syringe infusion pumpA Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless...5.6 Medium
- smiths-medical medfusion 4000 wireless syringe infusion pumpA Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless...8.1 High
- dell emc supportassist enterpriseDell EMC SupportAssist Enterprise version 1.1 creates a local Windows user account named ...7.0 High
- omninova vobot firmwareAn issue was discovered on VOBOT CLOCK before 0.99.30 devices. An SSH server exists with a...9.8 Critical
- ibm xiv storage system 2810-114 firmware, xiv storage system 2810-a14 firmware, xiv storage system 2812-114 firmware +1 more +3 moreIBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and...9.8 Critical
- web2pyweb2py remote code execution via hardcoded encryption key in session.connect function9.8 Critical
- extremenetworks extremewireless wingAn issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x...7.5 High
- iball ib-wra150n firmwareiBall iB-WRA150N 1.2.6 build 110401 Rel.47776n devices have a hardcoded password of admin for the...9.8 Critical
- ibm tealeaf customer experienceIBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 contains hard-coded credentials. A remote...9.8 Critical
- lenovo fingerprint manager proSensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including...7.8 High
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated...7.5 High
- barni master ip camera01 firmwareMASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.9.8 Critical
- trendnet tew-823dru firmwareTRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of...9.8 Critical
- zivif pr115-204-p-rs firmwareZivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root...9.8 Critical
- acti camera firmware, acti corporation d, b, i, and e series cameras +1 moreACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC use...9.8 Critical
- acti camera firmware, acti corporation d, b, i, and e series cameras +1 moreACTi cameras including the D, B, I, and E series using firmware version A1D-500-V6.11.31-AC fail...9.8 Critical
- dell storage managerThe SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is...9.8 Critical
- huawei fusionsphere openstackFusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses...5.3 Medium
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- cisco umbrella insights virtual appliance, umbrella virtual appliance +1 moreA vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an...8.2 High
- korenix jetnet5018g firmware, jetnet5310g firmware, jetnet5428g-2g-2fx firmware +6 more +8 moreA Use of Hard-coded Credentials issue was discovered in Korenix JetNet JetNet5018G version 1.4,...9.8 Critical
- korenix jetnet5018g firmware, jetnet5310g firmware, jetnet5428g-2g-2fx firmware +6 more +8 moreA Use of Hard-coded Cryptographic Key issue was discovered in Korenix JetNet JetNet5018G version...9.8 Critical
- emc appsyncEMC AppSync Server prior to 3.5.0.1 contains database accounts with hardcoded passwords that...7.8 High
- writediary diary with lockIn net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded...7.5 High
- dlink dgs-1500 firmwareD-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote...9.8 Critical
- cisco amp for endpoints, advanced malware protection +1 moreThe Cisco AMP For Endpoints application allows an authenticated, local attacker to access a...6.7 Medium
- Show moreLoading…