CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +12 more +14 moreCertain NETGEAR devices are affected by a a hardcoded password. This affects D6200 before 1.1.00...6.4 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or...7.5 High
- cellebrite ufed firmwareCellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB...5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX: Default credentials supplied in vMX configuration9.8 Critical
- juniper junos, juniper networks nfx series network services platform +1 moreNFX250 Series: Hardcoded credentials in the vSRX VNF instance.10.0 Critical
- opsramp gatewayOpsRamp Gateway 3.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root...9.8 Critical
- ge mark vie controll systemGE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root...7.8 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a...7.5 High
- kiali, redhat openshift service mesh +1 moreHard coded cryptographic key in Kiali8.6 High
- tp-link archer a7, ac1750 firmware +1 moreThis vulnerability allows network-adjacent attackers execute arbitrary code on affected...8.1 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than...9.1 Critical
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the...9.8 Critical
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded...7.5 High
- moxa pt-7528-12msc-12tx-4gsfp-hv-hv firmware, pt-7528-12msc-12tx-4gsfp-hv firmware, pt-7528-12msc-12tx-4gsfp-wv-wv firmware +52 more +54 moreIn Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9...9.8 Critical
- moxa pt-7528-12msc-12tx-4gsfp-hv-hv firmware, pt-7528-12msc-12tx-4gsfp-hv firmware, pt-7528-12msc-12tx-4gsfp-wv-wv firmware +52 more +54 moreIn Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9...7.5 High
- quest foglight evolveThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- inextrix astppAn issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config...7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...9.8 Critical
- ricoh sp c250dn firmware, sp c250sf firmware, sp c252dn firmware +1 more +3 moreRicoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be...7.5 High
- phoenixcontact tc cloud client 1002-4g firmware, tc cloud client 1002-txtx firmware, tc router 2002t-3g firmware +3 more +5 morePHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER...7.5 High
- wago e!cockpit, e\!cockpit +1 moreA hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e...5.5 Medium
- wago e!cockpit, e\!cockpit +1 moreAn exploitable firmware downgrade vulnerability exists in the firmware update package...7.8 High
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded...6.8 Medium
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software Border Gateway Protocol MD5 Authentication Bypass Vulnerability8.2 High
- moxa awk-3131a firmware, moxa +1 moreAn exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of...6.2 Medium
- moxa awk-3131a firmware, moxa +1 moreThe usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the...7.5 High
- netsweeperThe Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding...9.8 Critical
- cisco smart software manager on-premCisco Smart Software Manager On-Prem Static Default Credential Vulnerability9.8 Critical
- hcltech appscan, ibm corporation hcl appscan standard edition +1 moreHCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be...9.8 Critical
- qnap viocard 300 firmwareQNAP VioCard 300 has hardcoded RSA private keys.7.5 High
- xerox colorqube 9201 firmware, colorqube 9202 firmware, colorqube 9203 firmware +9 more +11 moreXerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts.9.8 Critical
- timetoolsltd sc7105 firmware, sc9205 firmware, sc9705 firmware +7 more +9 moreTimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750...9.8 Critical
- izoncam izon ip firmwareIZON IP 2.0.2: hard-coded password vulnerability9.8 Critical
- microsoft exchange server, exchange server 2010 service pack 3 update rollup 30, exchange server 2013 +4 more +6 moreA remote code execution vulnerability exists in Microsoft Exchange software when the software...8.8 High
- polycom hdx system softwarePolycom HDX Video End Points before 3.0 allows attackers to read arbitrary files via a .. (dot...9.8 Critical
- mediawikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 saves passwords in the local database, (1)...8.1 High
- eyesofnetworkAn issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded...9.8 Critical
- ibm security identity managerIBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or...6.8 Medium
- zpanelcp zpanelZPanel 10.0.1 has insufficient entropy for its password reset process.9.8 Critical
- apereo opencastHard-Coded Key Used For Remember-me Token in OpenCast6.8 Medium
- veraxsystems network management systemVerax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.7.5 High
- tp-link tl-sc 3130 firmware, tl-sc 3130g firmware, tl-sc 3171g firmware +1 more +3 moreA Security Bypass vulnerability exists in TP-LINK IP Cameras TL-SC 3130, TL-SC 3130G, 3171G,...7.5 High
- zavio f3105 firmware, f312a firmware +1 moreAn Authentication Bypass vulnerability exists in the web interface in Zavio IP Cameras through 1...7.5 High
- dlink dcs-1100 firmware, dcs-1100l firmware, dcs-1130 firmware +14 more +16 moreAn Authentication vulnerability exists in D-LINK WCS-1100 1.02, TESCO DCS-2121 1.05_TESCO, TESCO...5.3 Medium
- intelliantech aptus webIntellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account.9.8 Critical
- intelliantech aptusThe Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the...9.8 Critical
- intelliantech aptusThe Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and...9.8 Critical
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- ixpdata easyinstallIn IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP...7.5 High
- fortinet fortisiemA hard-coded password vulnerability in the Fortinet FortiSIEM database component version 5.2.5...9.8 Critical
- Show moreLoading…