CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- comparex miss marpleCOMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code...7.8 High
- ricoh myprintHardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android...9.8 Critical
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains...5.9 Medium
- ibm security guardiumIBM Security Guardium 10 and 10.5 contains hard-coded credentials, such as a password or...5.9 Medium
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials which could allow an attacker to bypass...5.9 Medium
- cisco energy management suiteA vulnerability in the configuration of a local database installed as part of the Cisco Energy...7.8 High
- lenovo system management module firmware, thinksystem smm +1 moreSystem Management Module Vulnerabilities8.1 High
- lenovo chassis management module (cmm), chassis management module firmware +1 moreCMM Security Vulnerability5.9 Medium
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...9.8 Critical
- neojapan inc. denbun by neojapan inc. (denbun pop version v3.3p r4.0 and earlier, denbun imap version v3.3i r4.0 and earlier), neo debun imap, debun pop +2 moreDenbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4...9.8 Critical
- cisco small business 300 series managed switches, sf200-24 firmware, sf200-24fp firmware +112 more +114 moreCisco Small Business Switches Privileged Access Vulnerability9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...7.5 High
- foscam c2 application firmware, c2 system firmware, opticam i5 application firmware +1 more +3 moreAn issue was discovered on Foscam C2 devices with System Firmware 1.11.1.8 and Application...9.8 Critical
- dell emc integrated data protection appliance, integrated data protection appliance +1 moreDell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability8.8 High
- ee 4gee firmwareAn issue was discovered on EE 4GEE HH70VB-2BE8GB3 HH70_E1_02.00_19 devices. Hardcoded root SSH...8.8 High
- linhandante andaThe server API in the Anda app relies on hardcoded credentials.9.8 Critical
- sv3c h.264 poe ip camera firmwareSV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B devices...9.8 Critical
- yokogawa fcj firmware, fcn-100 firmware, fcn-500 firmware +2 more +4 moreYokogawa STARDOM Controllers FCJ, FCN-100, FCN-RTU, FCN-500, All versions R4.10 and prior, The...8.1 High
- nuuo cmsNUUO CMS all versions 3.1 and prior, The application creates default accounts that have hard...9.8 Critical
- hangzhou xiongmai technology co., ltd xmeye p2p cloud serverAll versions of Hangzhou Xiongmai Technology Co., Ltd XMeye P2P Cloud Server may allow an...6.5 Medium
- auto-maskin dcu-210e, rp-210e, dcu-210e firmware +1 more +3 moreThe Auto-Maskin DCU 210E firmware contains an undocumented Dropbear SSH server, v2015.55, configured to listen on Port 22 while the DCU is running and is configured with a hard-coded credentials9.4 Critical
- ibm security key lifecycle managerIBM Tivoli Key Lifecycle Manager 2.6, 2.7, and 3.0 contains hard-coded credentials, such as a...5.9 Medium
- cisco video surveillance managerCisco Video Surveillance Manager Appliance Default Password Vulnerability9.8 Critical
- cisco prime collaboration provisioning, prime collaboration +1 moreCisco Prime Collaboration Provisioning Intermittent Hard-Coded Password Vulnerability9.8 Critical
- mensamaxAn issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android....7.5 High
- ptc thingworx platformAn issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded...7.5 High
- philips e-alert unit (non-medical device), e-alert firmware +1 morePhilips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard...9.8 Critical
- oracle webcenter interactionThe Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the...9.8 Critical
- i-o data device, inc. multiple i-o data network camera products, iodata ts-wrla firmware, ts-wrlp firmware +1 more +3 moreMultiple I-O DATA network camera products (TS-WRLP firmware Ver.1.09.04 and earlier, TS-WRLA...8.8 High
- amcrest ipc-hx1x3x-lexus eng n amcrestAmcrest networked devices use the same hardcoded SSL private key across different customers'...5.9 Medium
- epson iprintThe EPSON iPrint application 6.6.3 for Android contains hard-coded API and Secret keys for the...7.5 High
- broadcom unified infrastructure managementA hardcoded passphrase, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...7.5 High
- broadcom unified infrastructure managementA hardcoded secret key, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows...7.5 High
- eaton power xpert meter 4000 firmware, power xpert meter 6000 firmware, power xpert meter 8000 firmware +2 moreEaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private...9.8 Critical
- symantec norton password manager, symantec corporation norton identity safe for android +1 moreThe Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation...5.9 Medium
- npci bharat interface for money \(bhim\)The National Payments Corporation of India BHIM application 1.3 for Android relies on three...9.8 Critical
- planex cs-qr20 firmware, smacam night vision +1 moreAn issue was discovered on the PLANEX CS-QR20 1.30. A hardcoded account / password ("admin...9.8 Critical
- planex cs-w50hd firmwareAn issue was discovered on PLANEX CS-W50HD devices with firmware before 030720. A hardcoded...9.8 Critical
- posim evoPOSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user....9.8 Critical
- philips pagewriter tc10, tc20, tc30, tc50, tc70 cardiographs, pagewriter tc10 firmware, pagewriter tc20 firmware +3 more +5 moreIn Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018,...6.2 Medium
- zemana antiloggerA vulnerability in the permission and encryption implementation of Zemana Anti-Logger 1.9.3.527...7.5 High
- eltex esp-200 firmware, kaspersky lab eltex esp-200 +1 moreAn attacker without authentication can login with default credentials for privileged users in...7.3 High
- asustor data masterASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the...9.8 Critical
- dfndr security antivirus, anti-hacking & cleaner, psafe dfndr security +1 moreDFNDR Security Antivirus, Anti-hacking & Cleaner, 5.0.9, 2017-11-01, Android application uses a hard-coded key for encryption7.5 High
- live.me, liveme +1 moreLive.me - live stream video chat, 3.7.20, 2017-11-06, Android application uses a hard-coded key for encryption7.5 High
- cheetahmobile cm launcher 3d - theme, wallpaper, secure, efficient, cmcm cm launcher 3d +1 moreCheetahmobile CM Launcher 3D - Theme, wallpaper, Secure, Efficient, 5.0.3, 2017-09-19, Android application uses a hard-coded key for encryption7.5 High
- uber ubereats, uber technologies, inc. ubereats: uber for food delivery +1 moreUber Technologies, Inc. UberEATS: Uber for Food Delivery, 1.108.10001, 2017-11-02, iOS application uses a hard-coded key for encryption7.5 High
- Show moreLoading…