CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account...5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded RSA SSH key for the root account.5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded ECDSA SSH key for the root account.5.9 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded DSA SSH key for the root account.5.9 Medium
- netapp hci h610s firmware, hci baseboard management controller (bmc) hci h610c, netapp hci baseboard management controller (bmc) hci h615c, netapp hci baseboard management controller (bmc) hci h610s +1 moreThe NetApp HCI H610S Baseboard Management Controller (BMC) is shipped with a documented default...6.5 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,...6.1 Medium
- baxter em1200 firmware, em2400 firmware +1 moreBaxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,...9.8 Critical
- baxter prismaflex firmware, prismax firmware +1 moreBaxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains...4.9 Medium
- baxter sigma spectrum infusion system firmwareBaxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX &...2.4 Low
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a...9.8 Critical
- baxter sigma spectrum infusion system firmwareThe Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.5.3 Medium
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 uses ZODB storage without authentication.7.5 High
- mobile industrial robots a/s mir100, aliasrobotics mir1000 firmware, mir100 firmware +8 more +10 moreRVD#2566: Hardcoded Credentials on MiRX00 wireless Access Point9.8 Critical
- mobile industrial robots a/s mir100, aliasrobotics mir1000 firmware, mir100 firmware +8 more +10 moreRVD#2557: Hardcoded Credentials on MiRX00 Control Dashboard9.8 Critical
- easyrobotics er-flex firmware, er-lite firmware, er-one firmware +8 more +10 moreRVD#2558: Default credentials on SICK PLC allows disabling safety features9.8 Critical
- fortinet fortianalyzer, fortimanager +1 moreUse of a hard-coded cryptographic key to encrypt password data in CLI configuration in...7.5 High
- schneider-electric vijeo designerA CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1...8.8 High
- schneider-electric os loader, unity loader +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader...9.8 Critical
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a...7.5 High
- geovision door access control device, usavisionsys geovision gv-as1010 firmware, geovision gv-as210 firmware +3 more +5 moreGeoVision Door Access Control Device - Hardcoded privileged password6.2 Medium
- sap commerce, sap se commerce (data hub), sap commerce data hub +2 moreSAP Commerce, versions - 6.7, 1808, 1811, 1905, and SAP Commerce (Data Hub), versions - 6.7, 1808...9.8 Critical
- foxitsoftware phantompdf, reader +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information...9.8 Critical
- fortinet forticlient, forticlient for windows +1 moreUse of a hard-coded cryptographic key to encrypt security sensitive data in local storage and...5.5 Medium
- cisco ios, ios 12.2(60)ez16 +1 moreCisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability8.8 High
- ibm security guardiumIBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or...4.1 Medium
- ibm security guardiumIBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic...6.8 Medium
- aviatrix controller, gateway +1 moreAn issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by...7.5 High
- mylittletools mylittleadminThe management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code...9.8 Critical
- ceph ceph-ansibleA flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were...8.8 High
- netgear rbs50y firmware, srr60 firmware, srs60 firmware +2 moreAn issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2...8.3 High
- glpi-project glpiPublic GLPIKEY can be used to decrypt any data in GLPI7.2 High
- ibm data risk managerIBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password...10.0 Critical
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Static Credential Vulnerabilities8.1 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Static Credential Vulnerabilities8.1 High
- tp-link nc200 firmware, nc210 firmware, nc220 firmware +4 more +6 moreCertain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225,...9.8 Critical
- janeczku calibre-webCalibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT'...9.8 Critical
- accellion file transfer applianceAccellion File Transfer Appliance Use of Hard-coded Credentials9.8 Critical
- percona xtradb clusterAn issue was discovered in Percona XtraDB Cluster before 5.7.28-31.42. A bundled script...8.1 High
- netgear d3600 firmware, d6000 firmware +1 moreCertain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76...8.8 High
- schneider-electric 140 cpu6x firmware, 140 noc 77101 firmware, 140 noc 78x00 firmware +7 more +9 moreA CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions...7.5 High
- hcltech appscan"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get...7.5 High
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows...9.8 Critical
- b&r automation runtime, br-automation automation studio +1 moreB&R Automation Runtime SNMP Authentication and Authorization Weakness9.4 Critical
- jitsi meetThe Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default...9.8 Critical
- zoom meetingsairhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242...7.5 High
- Show moreLoading…