CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- robotronic runasspcRunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted...7.5 High
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials9.8 Critical
- bluproducts g90 firmware, g9 firmware, luna simo firmware +2 more +4 moreAn issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates...7.8 High
- yokogawa exaopc, yokogawa electric corporation centum vp, yokogawa centum vp entry firmware +1 more +3 moreThe following Yokogawa Electric products hard-code the password for CAMS server applications:...9.8 Critical
- yokogawa exaopc, yokogawa electric corporation centum vp, yokogawa centum vp entry firmware +1 more +3 moreThe following Yokogawa Electric products do not change the passwords of the internal Windows...9.8 Critical
- freetakserver-ui project freetakserver-uiHard coded credentials in FreeTAKServer8.8 High
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreImproper physical access control and use of hard-coded credentials in /etc/passwd permits an...6.8 Medium
- phicomm k2 firmware, k3c firmware +1 moreUse of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on...7.8 High
- home owners collection management system project owners collection management systemHome Owners Collection Management System v1.0 was discovered to contain hardcoded credentials...9.8 Critical
- extensis portfolioExtensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to...8.8 High
- trendmicro serverprotect, trend micro serverprotect for emc celerra, serverprotect for microsoft windows / novell netware +3 more +5 moreTrend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform...9.8 Critical
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS before Brocade Fabric OS v8.2.1c, v8.1.2h, and all versions of Brocade Fabric...9.8 Critical
- gravitl netmakerUse of Hard-coded Cryptographic Key in Netmaker7.2 High
- asus cmax6000 firmwareThe use of a hard-coded cryptographic key significantly increases the possibility encrypted data...7.5 High
- becton dickinson (bd) bd viper lt system, bd viper lt system firmware +1 moreBD Viper LT System - Hardcoded Credentials8.0 High
- bd pyxis anesthesia station 4000 firmware, pyxis anesthesia station es firmware, pyxis cato firmware +45 more +47 moreBD Pyxis Products - Hardcoded Credentials7.0 High
- phpgurukul dairy farm shop management systemDairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the...9.8 Critical
- schneider-electric easergy p141 firmware, easergy p142 firmware, easergy p143 firmware +30 more +32 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists. If an attacker were to obtain the...9.8 Critical
- siemens sicam toolbox iiA vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use...6.5 Medium
- xylem aquaviewUse of hardcoded credentials impacting AquaView versions 1.60, 7.x, 8.x9.3 Critical
- schneider electric easergy p5, schneider-electric easergy p5 firmware +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information...7.5 High
- advantech adam-3600, adam-3600 firmware +1 moreAdvantech ADAM-36009.8 Critical
- printerlogic web stackPrinterLogic Web Stack versions 19.1.1.13 SP9 and below use a hardcoded APP_KEY value, leading to...8.1 High
- online course registration project course registrationOnline Course Registration v1.0 was discovered to contain hardcoded credentials in the source...9.8 Critical
- reolink rlc-410w firmwareAn information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W...7.5 High
- fresenius kabi vigilant software suite (mastermed dashboard), fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System hard coded credentials6.3 Medium
- fresenius kabi agilia link+, fresenius-kabi agilia connect firmware, agilia partner maintenance software +4 more +6 moreFresenius Kabi Agilia Connect Infusion System7.3 High
- mingsoft mcmsMCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key...9.8 Critical
- bosch amc2, access management system, access professional edition +5 more +7 moreUse of Hard-coded Cryptographic Key5.7 Medium
- jimoty, inc. jimoty app for android, jmty jimoty +1 moreJimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service...3.3 Low
- mitsubishielectric fx3u-enet-l firmware, fx3u-enet-p502 firmware, fx3u-enet firmware +2 moreLack of administrator control over security vulnerability in MELSEC-F series FX3U-ENET Firmware...7.5 High
- le-yan co., ltd. dental management systemLe-yan Co., Ltd. dental management system - Hard-coded Credentials9.8 Critical
- tibco ftl, tibco software inc. ftl - community edition, ftl - developer edition +1 more +3 moreTIBCO FTL Secret Generation Vulnerability9.3 Critical
- siemens cp-8000 master module with i/o -25/+70°c, cp-8000 master module with i/o -40/+70°c, cp-8021 master module +5 more +7 moreA vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions <...8.8 High
- puddingbot project puddingbot, puddingbot pudding-bot +1 moreBot token exposed in main.py9.1 Critical
- qxip homer webappQXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736...9.8 Critical
- apache kylinHardcoded credentials7.5 High
- controlup agentA hardcoded key in ControlUp Real-Time Agent (cuAgent.exe) before 8.2.5 may allow a potential attacker to run OS commands via a WCF channel.7.2 High
- encsecurity datavaultENC DataVault 7.1.1W uses an inappropriate encryption algorithm, such that an attacker (who does...4.2 Medium
- netgear r6700 firmwareNetgear Nighthawk R6700 version 1.0.4.120 makes use of a hardcoded credential. It does not appear...8.8 High
- netgear rax43 firmwareNetgear RAX43 version 1.0.3.96 makes use of hardcoded credentials. It does not appear that normal...8.8 High
- trendnet tew-827dru firmwareTrendnet AC2600 TEW-827DRU version 2.08B01 makes use of hardcoded credentials. It is possible to...9.8 Critical
- dlink dir-2640-us firmwareQuagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 use default hard-coded...8.8 High
- philips intellibridge ec 40 hub, intellibridge ec 80 hub, intellibridge ec40 firmware +1 more +3 morePhilips IntelliBridge EC 40 and EC 80 Hub Use of Hard-coded Credentials8.1 High
- solarwinds web help desk, webhelpdesk +1 moreHard credentials discovered in SolarWinds Web Help Desk which allows to execute Arbitrary Hibernate Queries6.8 Medium
- netgear rbk352 firmware, rbr350 firmware, rbs350 firmware +2 moreCertain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10...9.6 Critical
- netgear rbk352 firmware, rbr350 firmware, rbs350 firmware +2 moreCertain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10...7.4 High
- netgear xr1000 firmwareNETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.6.1 Medium
- acclaim systems usaherdsAcclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.8.1 High
- fortinet forticlient, forticlient endpoint management server, forticlientems, forticlientwindows, forticlientlinux, forticlientmac +2 moreA combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS...8.2 High
- Show moreLoading…