CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all BMC firmware versions prior to 3.38.30, contain a vulnerability in the...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, DGX-1 with BMC firmware versions prior to 3.38.30. DGX-2 with BMC firmware...7.5 High
- intel bmc firmware, nvidia dgx servers +1 moreNVIDIA DGX servers, all DGX-1 with BMC firmware versions prior to 3.38.30 and all DGX-2 with BMC...9.8 Critical
- winstonprivacy winston firmwareWinston 1.5.4 devices make use of a Monit service (not managed during the normal user process)...7.1 High
- micro focus application performance management, operation bridge (containerized), operation bridge manager +2 more +4 moreArbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.9.8 Critical
- konzept-ix publixoneA hardcoded AES key in CipherUtils.java in the Java applet of konzept-ix publiXone before 2020...6.5 Medium
- commscope ruckus vriotRuckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An...9.8 Critical
- pepperl+fuchs p+f comtrol rocketlinx, korenix jetnet, jetnet4510 firmware +26 more +28 morePepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products9.8 Critical
- szuray iptv\/h.264 video encoder firmware, iptv\/h.265 video encoder firmware +1 moreAn issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can...9.8 Critical
- jtechdigital h.264 iptv encoder 1080p\@60hz firmware, provideoinstruments vecaster-4k-hevc firmware, vecaster-hd-h264 firmware +4 more +6 moreAn issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders...9.8 Critical
- unisys stealthUnisys Stealth(core) before 4.0.132 stores Passwords in a Recoverable Format.7.8 High
- august connect firmware, home, connect wi-fi bridge firmware +1 more +3 moreUse of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App3.5 Low
- rubetek rv-3406 firmware, rv-3409 firmware, rv-3411 firmware +2 moreThe Telnet service of Rubetek cameras RV-3406, RV-3409, and RV-3411 cameras (firmware versions...9.8 Critical
- microfocus operation bridge reporterAn Authorization Bypass vulnerability on Micro Focus Operation Bridge Reporter, affecting version...9.8 Critical
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or...5.9 Medium
- dlink covr-2600r firmware, covr-3902 firmware +1 moreD-Link COVR-2600R and COVR-3902 Kit before 1.01b05Beta01 use hardcoded credentials for telnet...9.8 Critical
- microchip atsama5d21c-cu firmware, atsama5d21c-cur firmware, atsama5d225c-d1m-cur firmware +73 more +75 moreThe Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and...7.5 High
- hyland onbaseAn issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. PKI...9.1 Critical
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have hardcoded FTP credentials. This is fixed in Telium 2 SDK v9...6.6 Medium
- ingenico telium 2 firmwareIngenico Telium 2 POS terminals have hardcoded PPP credentials. This is fixed in Telium 2 SDK v9...6.8 Medium
- pancakeapp pancakeUse of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge...9.8 Critical
- online book store project book storeIn projectworlds Online Book Store 1.0 Use of Hard-coded Credentials in source code leads to...9.8 Critical
- ibm guardium data encryption, security guardium data encryption, guardium for cloud key management +2 moreIBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a...6.8 Medium
- cisco wide area application services (waas), csp 5228-w firmware, csp 5436-w firmware +3 more +5 moreCisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnerability9.8 Critical
- secomea gatemanager, gatemanager 8250 firmware +1 moreOFF-BY-ONE ERROR CWE-1939.8 Critical
- verint 4320 firmware, 5620ptz firmware, s5120fd firmware +2 moreA hardcoded credentials vulnerability exists in Verint 5620PTZ Verint_FW_0_42, Verint 4320...7.5 High
- moog exvf5c-2 firmware, exvp7c2-3 firmware +1 moreMoog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This...7.5 High
- gog galaxyThe client (aka GalaxyClientService.exe) in GOG GALAXY 2.0.19 allows local privilege escalation...7.8 High
- robotemi temiThe Temi application 1.3.3 through 1.3.7931 for Android has hard-coded credentials.7.5 High
- ivanti dsm netinstUnsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption...9.8 Critical
- gog galaxy, galaxyclientservice +1 moreGOG Galaxy GalaxyClientService Privilege Escalation8.4 High
- ibm security secret serverIBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or...5.9 Medium
- cisco data center network managerCisco Data Center Network Manager Authentication Bypass Vulnerability9.8 Critical
- nec sv9100 firmwareCertain builds of NEC SV9100 software could allow an unauthenticated, remote attacker to log into...9.8 Critical
- schneider-electric easergy builderA CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in...7.8 High
- automationdirect c-more hmi ea9 firmware, c-more hmi ea9 +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.9 Medium
- ibm verify gateway (ivg), verify gateway +1 moreIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or...6.8 Medium
- cisco rv110w wireless-n vpn firewall firmwareCisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability9.8 Critical
- dell emc omimssc for sccm, emc omimssc for scvmm, omimssc (openmanage integration for microsoft system center) +2 moreDell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions...8.8 High
- rittal cmc iii pu 7030.000 firmware, cmciii-pu-9333e0fb firmware, iot interface 3124.300 +2 more +4 moreAn issue was discovered on Rittal PDU-3C002DEC through 5.17.10 and CMCIII-PU-9333E0FB through 3...9.8 Critical
- tenda ac15 firmwareA hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19...9.8 Critical
- gfi software helpdeskThis improper access control vulnerability in Helpdesk allows attackers to get control of QNAP...9.8 Critical
- cellebrite ufed firmwareThe Cellebrite UFED physical device 5.0 through 7.5.0.845 relies on key material hardcoded within...7.5 High
- broadcom brocade network advisor, brocade communications systems, inc. network advisor +1 moreA vulnerability in Brocade Network Advisor Version Before 14.3.1 could allow an unauthenticated,...9.8 Critical
- mk-authAn issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login...9.8 Critical
- zyxel cloud cnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a world-readable axess/opt/axXMPPHandler/config...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the cloud1234 password for the a1@chopin account...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the wbboEZ4BN3ssxAfM hardcoded password for the...9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axzyxel password for the livedbuser account.9.8 Critical
- zyxel cloudcnm secumanagerZyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has the axiros password for the root account.9.8 Critical
- Show moreLoading…