CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- solarwinds orion platformSolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and...7.8 High
- tk-star q90 junior gps horloge firmwareAn issue was discovered on TK-Star Q90 Junior GPS horloge 3.1042.9.8656 devices. When using the...7.8 High
- mofinetwork mofi4500-4gxelte firmwareAn issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They...9.8 Critical
- mofinetwork mofi4500-4gxelte firmwareAn issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH...9.8 Critical
- reolink rlc-410 firmware, rlc-422 firmware, rlc-423 firmware +7 more +9 moreReolink P2P Cameras7.8 High
- open5gsOpen5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account.8.8 High
- mygeeni gnc-cw013 firmwareAn issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8...7.2 High
- mygeeni gnc-cw013 firmwareAn issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the...9.8 Critical
- bosch fsm-2500, fsm-5000, fsm-2500 firmware +1 more +3 moreHard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server10.0 Critical
- cisco smart software manager on-premCisco Smart Software Manager Satellite Static Credential Vulnerability7.8 High
- ibm spectrum lsf, spectrum lsf suite +1 moreIBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who...7.4 High
- sooil anydana-a firmware, anydana-i firmware, diabecare rs firmware +2 moreIn SOOIL Developments Co., Ltd Diabecare RS, AnyDana-i and AnyDana-A, a hard-coded physician PIN...6.8 Medium
- kaspersky tinycheckIn TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for…9.8 Critical
- siemens scalance x-200rna switch family, scalance x-300 switch family (incl. x408 and siplus net variants), scalance xr324-12m firmware +7 more +9 moreA vulnerability has been identified in SCALANCE X-300 switch family (incl. X408 and SIPLUS NET...5.9 Medium
- siemens scalance x-200 switch family (incl. siplus net variants), scalance x-200irt switch family (incl. siplus net variants), scalance x-200rna switch family +66 more +68 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...5.9 Medium
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreUse of a Hard-coded Password in VNCserver in Amino Communications AK45x series, AK5xx series,...4.4 Medium
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreUse of Hard-coded Credentials in EntoneWebEngine in Amino Communications AK45x series, AK5xx...9.8 Critical
- amino ak45x firmware, ak5xx firmware, ak65x firmware +3 more +5 moreBecause of hard-coded SSH keys for the root user in Amino Communications AK45x series, AK5xx...9.8 Critical
- panasonic wv-s2231l firmwarePanasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which...6.8 Medium
- qnap qesHard-coded Password Vulnerability in QES6.3 Medium
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below....7.5 High
- bilancAn issue was discovered in Programi Bilanc build 007 release 014 31.01.2020 and possibly below....9.8 Critical
- bilancProgrami Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several...9.8 Critical
- zte zxhn e8810 firmware, zxhn e8820 firmware, zxhn e8822 firmware +2 moreZTE E8810/E8820/E8822 series routers have an information leak vulnerability, which is caused by...7.5 High
- adremsoft netcrunchAdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web...9.8 Critical
- solarwinds n-centralAn issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by...7.8 High
- siemens logo! 8 bm (incl. siplus variants), logo! soft comfort, logo\! 8 bm firmware +1 more +3 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3),...5.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- mobileviewpoint wireless multiplex terminal playout serverThe Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout...9.8 Critical
- google androidIn the Broadcom Nexus firmware, there is an insecure default password. This could lead to local...5.5 Medium
- google androidIn the Broadcom Nexus firmware, there is an insecure default password. This could lead to local...7.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...8.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware, v1600d firmware +2 more +4 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1...9.8 Critical
- vsolcn v1600d firmwareAn issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is...9.8 Critical
- vsolcn v1600d firmware, v1600g1 firmware, v1600g2 firmware +2 moreAn issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and...7.8 High
- vsolcn v1600d-mini firmware, v1600d4l firmware +1 moreAn issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. A...7.8 High
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W firmware includes a hardcoded API account and password that is...9.8 Critical
- barco wepresent wipg-1600w firmwareBarco wePresent WiPG-1600W devices use Hard-coded Credentials (issue 2 of 2). Affected Version(s)...9.8 Critical
- vmware sd-wan orchestratorThe SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the...9.8 Critical
- redhat.com rhacm, redhat advanced cluster management for kubernetes +1 moreA flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were...3.5 Low
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a...9.8 Critical
- planet nvr-1615 firmware, nvr-915 firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** The firmware of the PLANET Technology Corp NVR-915 and NVR-1615...9.8 Critical
- airleader master controlAirleader Master and Easy <= 6.21 devices have default credentials that can be used for a denial...7.5 High
- linuxfoundation nats-server, fedoraproject fedora +1 moreIncorrect handling of credential expiry by /nats-io/nats-server9.8 Critical
- studyplus inc. app, wantedlyinc studyplus +1 moreStudyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a...5.5 Medium
- imomobile verve connect vh510 firmwareThe Relish (Verve Connect) VH510 device with firmware before 1.0.1.6L0516 contains undocumented...9.8 Critical
- Show moreLoading…