CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- dlink dir-3040 firmwareA hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK...10.0 Critical
- juniper contrail cloudContrail Cloud: Hardcoded credentials for RabbitMQ service8.6 High
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or...6.5 Medium
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated...3.3 Low
- retty, retty inc. app +1 moreRetty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14...7.5 High
- cisco business process automation, business process automation (bpa) +1 moreCisco Business Process Automation Privilege Escalation Vulnerabilities8.8 High
- cisco business process automation, business process automation (bpa) +1 moreCisco Business Process Automation Privilege Escalation Vulnerabilities8.8 High
- commscope ruckus iot controllerAn issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API...7.8 High
- commscope ruckus iot controllerAn issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard...9.8 Critical
- qsan sanosQSAN SANOS - Use of Hard-coded Credentials9.8 Critical
- dell storage managerQSAN Storage Manager - Use of Hard-coded Password-29.1 Critical
- dell storage manager, qsan sanos, xevo +2 moreQSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password7.3 High
- dell storage managerQSAN Storage Manager - Use of Hard-coded Cryptographic Key9.8 Critical
- commscope ruckus iot controllerAn issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard...9.8 Critical
- fortinet fortiauthenticatorUsage of hard-coded cryptographic keys to encrypt configuration files and debug logs in...4.0 Medium
- arlo q plus, q plus firmware +1 moreThis vulnerability allows attackers with physical access to escalate privileges on affected...6.8 Medium
- phoenix contact axl f bk, il, phoenixcontact axl f bk eip ef firmware +17 more +19 morePhoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices7.3 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability8.8 High
- weidmueller ie-wl-bl-ap-cl-eu firmware, ie-wl-bl-ap-cl-us firmware, ie-wl-vl-ap-br-cl-eu firmware +7 more +9 moreWEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability7.5 High
- synology calendarUse of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0...5.8 Medium
- ge reason rpv311, reason rpv311 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...6.3 Medium
- enphase envoy firmwareAn issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel...5.3 Medium
- zoll defibrillator dashboardZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in...5.5 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak...7.2 High
- dlink dir-868l firmwareThe D-Link router DIR-868L 3.01 is vulnerable to credentials disclosure in telnet service through...7.5 High
- dlink dir-885l-mfc firmwareThe D-link router DIR-885L-MFC 1.15b02, v1.21b05 is vulnerable to credentials disclosure in...7.5 High
- dlink dir-880l firmwareThe D-Link router DIR-880L 1.07 is vulnerable to credentials disclosure in telnet service through...7.5 High
- tpm2-software tpm2-tools, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a...5.9 Medium
- trend micro home network securityA hard-coded password vulnerability exists in the SFTP Log Collection Server function of Trend...6.5 Medium
- ibm security guardiumIBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic...5.9 Medium
- ibm security identity managerIBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or...5.9 Medium
- draeger x-dock firmwareDraeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code...8.8 High
- sitel cap/prx, sitel-sa remote cap\/prx firmware +1 moreSITEL CAP/PRX hardcoded credentials9.6 Critical
- sonicwall email security virtual applianceSonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default...7.8 High
- advantech wise-paas/rmm, wise-paas\/rmm +1 moreThe affected product allows attackers to obtain sensitive information from the WISE-PaaS...9.1 Critical
- hongdian h8922 firmwareHongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a...9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic...5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic...6.2 Medium
- inim smartliving 10100l firmware, smartliving 10100lg3 firmware, smartliving 1050 firmware +3 more +5 moreInim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials. An attacker...9.8 Critical
- edimax technology co., ltd. ic-3140w, edimax ic-3140w firmware +1 moreEDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password7.5 High
- void aural rec monitorAn issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored...7.5 High
- siemens siveillance video open network bridgeA vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3),...8.8 High
- juniper junos, juniper networks junos os +1 morecSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.8.1 High
- juniper junos, juniper networks junos os +1 moreNFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.10.0 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.7.8 High
- xerox altalink b8045/b8055/b8065/b8075/b8090, altalink c8030/c8035/c8045/c8055/c8070, altalink b8045 firmware +25 more +27 moreDefault hidden Privileged Account Vulnerability in multiple XEROX devices9.4 Critical
- mi ax1800 firmware, rm1800 firmware +1 moreOn Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption...7.5 High
- cohesity dataplatformUndocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6...9.8 Critical
- hpe unified data managementA security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of...5.5 Medium
- mobileiron mobile\@workThe MobileIron agents through 2021-03-22 for Android and iOS contain a hardcoded encryption key,...9.8 Critical
- Show moreLoading…