CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.1.4. It uses...9.8 Critical
- blackbox icompel firmware, onelan net-top-box firmware +1 moreBlack Box iCOMPEL 9.2.3 through 11.1.4, as used in ONELAN Net-Top-Box 9.2.3 through 11.1.4 and...9.8 Critical
- fortinet fortirecorder, fortirecorder firmware +1 moreUse of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow...9.8 Critical
- onelogin saml ssoThe onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for...7.5 High
- mirasys vmsMirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security...9.8 Critical
- cisco integrated management controller supervisor, ucs director, ucs director express for big data +1 more +3 moreCisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability9.8 Critical
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of hardcoded RC2 key6.8 Medium
- johnson controls metasys versions prior to 9.0, johnsoncontrols metasys system +1 moreMetasys use of shared RSA key pairs6.8 Medium
- swann swwhd-intcam-hd firmwareSwann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root.9.8 Critical
- elmelectronics elm27 firmwareA clone version of an ELM327 OBD2 Bluetooth device has a hardcoded PIN, leading to arbitrary...9.8 Critical
- akuvox sp-r50p firmwareHardcoded credentials in the Akuvox R50P VoIP phone 50.0.6.156 allow an attacker to get access to...7.2 High
- audiocodes median 500-msbr firmware, median 500l-msbr firmware, median 800c-msbr firmware +1 more +3 moreAn issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR...8.8 High
- cisco findit network manager, findit network probe +1 moreCisco FindIT Network Management Software Static Credentials Vulnerability8.4 High
- arlo basestation firmware, vmb3010 firmware, vmb3500 firmware +3 more +5 moreArlo Basestation firmware 1.12.0.1_27940 and prior contain a hardcoded username and password...9.8 Critical
- fortinet fcm-mb40 firmwareDynacolor FCM-MB40 v1.2.0.0 devices have a hard-coded SSL/TLS key that is used during an...5.9 Medium
- invoxia nvx220 firmwareInvoxia NVX220 devices allow TELNET access as admin with a default password.9.8 Critical
- wolfvision cynapWolfVision Cynap before 1.30j uses a static, hard-coded cryptographic secret for generating...9.8 Critical
- amcrest ipm-721s firmwareAmcrest IPM-721S V2.420.AC00.16.R.20160909 devices have default credentials that are hardcoded in...9.8 Critical
- dlink dcs-1100 firmware, dcs-1130 firmware +1 moreAn issue was discovered on D-Link DCS-1100 and DCS-1130 devices. The device has a custom telnet...9.8 Critical
- nortekcontrol linear emerge elite firmware, linear emerge essential firmware +1 moreLinear eMerge E3-Series devices have Hard-coded Credentials.9.8 Critical
- nortekcontrol linear emerge elite firmware, linear emerge essential firmware +1 moreLinear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).9.8 Critical
- sick msc800, msc800 firmware +1 moreSICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard...9.8 Critical
- optergy enterprise, proton +1 moreOptergy Proton/Enterprise devices have Hard-coded Credentials.7.3 High
- abb cp620-web firmware, cp620 firmware, cp630-web firmware +13 more +15 moreThe ABB HMI components implement hidden administrative accounts that are used during the...8.8 High
- cisco data center network managerCisco Data Center Network Manager Authentication Bypass Vulnerability9.8 Critical
- cylan clever dog smart camera panorama dog-2w firmware, clever dog smart camera plus dog-2w-v4 firmware +1 moreOn Shenzhen Cylan Clever Dog Smart Camera DOG-2W and DOG-2W-V4 devices, an attacker on the...9.8 Critical
- wago 852-1305 firmware, 852-1505 firmware, 852-303 firmware +2 moreWAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain...9.8 Critical
- wago 852-1305 firmware, 852-1505 firmware, 852-303 firmware +2 moreWAGO 852-303 before FW06, 852-1305 before FW06, and 852-1505 before FW03 devices contain...9.8 Critical
- enttec datagate mk2 firmware, e-streamer mk2 firmware, pixelator firmware +1 more +3 moreAn issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with...9.8 Critical
- ibm infosphere information server, infosphere information server on cloud, watson knowledge catalog +2 moreIBM InfoSphere Information Server 11.7.1.0 stores a common hard coded encryption key that could...6.2 Medium
- primasystems flexairPrima Systems FlexAir devices have Hard-coded Credentials.8.8 High
- hewlett packard enterprise hpe intelligent management center (imc) plat, hp intelligent management center +1 moreA remote code execution vulnerability was identified in HPE Intelligent Management Center (IMC)...8.8 High
- hewlett packard enterprise hpe intelligent management center (imc) plat, hp intelligent management center +1 moreA remote credential disclosure vulnerability was identified in HPE Intelligent Management Center ...6.5 Medium
- ivanti landesk management suiteUse of a hard-coded encryption key in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager...4.5 Medium
- orpak siteomatAn authentication bypass was found in an unknown area of the SiteOmat source code. All SiteOmat...9.8 Critical
- zyxel p-660hn-t1 firmwareThe rpWLANRedirect.asp ASP page is accessible without authentication on ZyXEL P-660HN-T1 V2 (2.00...9.8 Critical
- computrols building automation softwareComputrols CBAS 18.0.0 has Default Credentials.9.8 Critical
- computrols building automation softwareComputrols CBAS 18.0.0 has hard-coded encryption keys.6.5 Medium
- schneider-electric bmx-nor-0200h firmwareA CWE-798 use of hardcoded credentials vulnerability exists in BMX-NOR-0200H with firmware...7.2 High
- bmc patrol agentBy default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting...9.8 Critical
- siemens simatic wincc (tia portal), simatic wincc runtime advanced, simatic wincc runtime professional +16 more +18 moreA vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V15.1...9.1 Critical
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm firmware +1 moreA vulnerability has been identified in LOGO!8 BM (All versions). Project data stored on the...7.5 High
- emerson ve6046 firmwareEmerson VE6046 09.0.12 devices have hardcoded admin credentials allowing remote connection to the...9.8 Critical
- anker-in roav dashcam a1 firmwareAn exploitable vulnerability exists in the Wi-Fi Access Point feature of the Roav A1 Dashcam...7.1 High
- ge communicatorGE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded...9.8 Critical
- open source alpine linux, f5 big-ip controller, gliderlabs docker-alpine +1 more +3 moreVersions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the ...9.8 Critical
- wago 750-330 firmware, 750-352 firmware, 750-829 firmware +13 more +15 moreThe Web-GUI on WAGO Series 750-88x (750-330, 750-352, 750-829, 750-831, 750-852, 750-880, 750-881...9.8 Critical
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01...7.4 High
- ascensia contour diabetesAn issue was discovered in the Ascensia Contour NEXT ONE application for Android before 2019-01...7.4 High
- sierrawireless airlink es450 firmwareA hard-coded credentials vulnerability exists in the snmpd function of the Sierra Wireless...8.1 High
- Show moreLoading…