CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by...8.8 High
- billion 5200w-t firmwareThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three...8.8 High
- billion 5200w-t firmware, zyxel p660hn-t1a v1 firmware, p660hn-t1a v2 firmware +2 moreThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user...9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 use default credentials...9.8 Critical
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 stores usernames,...7.8 High
- crestron am-100 firmware, am-101 firmware, airmedia +2 moreCrestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 are vulnerable to...9.8 Critical
- deltek visionDeltek Vision 7.x before 7.6 permits the execution of any attacker supplied SQL statement through...9.8 Critical
- smartertools smartermailSmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated...8.2 High
- polycom better together over ethernet connector, unified communications software +1 moreVVX products using UCS software version 5.8.0 and earlier with Better Together over Ethernet...6.8 Medium
- xinruidz sundray wan controller firmwareWAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 and earlier has a backdoor account...9.8 Critical
- dasannetworks h660rm firmwareDASAN H660RM devices with firmware 1.03-0022 use a hard-coded key for logs encryption. Data...7.5 High
- glory-global rbw-100 firmwareAn issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded...9.8 Critical
- dell emc networking os10, dell emc networking os10 +1 moreDSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability8.3 High
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreBaxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ...6.8 Medium
- baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 moreBaxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ...9.8 Critical
- jenzabar internet campus solutionICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02...9.8 Critical
- hospira plum a+ infusion system, plum a+3 infusion system, symbiq infusion system +3 more +5 moreHard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior,...9.8 Critical
- patlite nbm-d88n firmware, nhl-3fb1 firmware, nhl-3fv1n firmware +2 moreA hidden backdoor on PATLITE NH-FB Series devices with firmware version 1.45 or earlier, NH-FV...9.8 Critical
- hid global easylobby soloEasyLobby Solo contains default administrative credentials. An attacker could exploit this...8.4 High
- zohocorp manageengine adselfservice plusAn issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses...7.5 High
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping...8.8 High
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller...8.8 High
- indionetworks unibox firmwareAn issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit...8.8 High
- teracue enc-400 hdmi2 firmware, enc-400 hdmi firmware, enc-400 hdsdi firmware +2 moreAn issue was discovered on Teracue ENC-400 devices with firmware 2.56 and below. After successful...8.1 High
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Static Credential Vulnerability9.8 Critical
- tenable alcatel lucent i-240w-q gpon ont, nokia i-240w-q gpon ont firmware +1 moreThe Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 contains multiple hard...9.8 Critical
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance contains...5.1 Medium
- dasannetworks h665 firmwareThe backdoor account dnsekakf2$$ in /bin/login on DASAN H665 devices with firmware 1.46p1-0028...9.8 Critical
- dell wyse password encoder, wyse thinlinux +1 moreDSA-2019-022: Dell Wyse Password Encoder Hard-coded Cryptographic Key Vulnerability7.9 High
- cisco network assurance engineCisco Network Assurance Engine CLI Access with Default Password Vulnerability7.7 High
- mobotix s14 firmwareAn issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. There is a default password of...9.8 Critical
- cisco aironet active sensor, digital network architecture center +1 moreCisco Aironet Active Sensor Static Credentials Vulnerability7.5 High
- ics-cert lcds laquis scada, lcds laquis scada +1 moreLCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an...9.8 Critical
- practecol, llc guardzilla all-in-one video security system, guardzilla gz521w firmware +1 moreGuardzilla All-In-One Video Security System Hard-Coded Credential10.0 Critical
- coturnAn exploitable unsafe default configuration vulnerability exists in the TURN server function of...6.5 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a...5.1 Medium
- teradata viewpointTeradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4...8.1 High
- identicard premisys idPremisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to...7.5 High
- identicard premisys idPremisys Identicard version 3.1.190 stores user credentials and other sensitive information with...7.5 High
- identicard premisys idPremisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port...8.8 High
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Two hard coded credentials sharing the same password give an attacker the ability to take control of any installation of the software.10.0 Critical
- juniper networks atp, juniper advanced threat prevention +1 moreJuniper ATP: Hard coded credentials used in Web Collector10.0 Critical
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a and toshiba home gateway hem-gw26a +2 moreToshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and...8.8 High
- ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreRICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the...8.8 High
- battelle v2i hubBattelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An...9.8 Critical
- schneider electric se evlink parking v3.2.0-12 v1 and earlier, schneider-electric evlink parking firmware +1 moreA Hard-coded Credentials vulnerability exists in EVLink Parking, v3.2.0-12_v1 and earlier, which...9.8 Critical
- dlink dir-140l firmware, dir-640l firmware +1 moredirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to...9.8 Critical
- dlink dir-140l firmware, dir-640l firmware, dsl-2770l firmware +4 more +6 morespaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to...9.8 Critical
- dlink dsl-2770l firmwareatbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin...9.8 Critical
- logitech harmony hub, harmony hub firmware +1 moreLogitech Harmony Hub before version 4.15.206 contained two hard-coded accounts in the XMPP server...9.8 Critical
- Show moreLoading…