CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- cassia networks access controller, sicunet access control +1 moreSICUNET Access Controller hard-coded password9.8 Critical
- igel universal management suiteAn issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES...8.8 High
- igel universal management suiteAn issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES...5.5 Medium
- d-link dir-890l firmware** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary...8.8 High
- totolink ex1200t firmwareIn TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the...4.3 Medium
- schneider electric wiser smart, schneider-electric wiser smart eer21000 firmware, wiser smart eer21001 firmware +2 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could allow arbitrary code to...9.4 Critical
- owllabs meeting owl pro firmwareOwl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password ...9.3 Critical
- owllabs meeting owl pro firmwareOwl Labs Meeting Owl 5.2.0.15 allows attackers to activate Tethering Mode with hard-coded...7.4 High
- linkplay sound barLinkPlay Sound Bar v1.0 allows attackers to escalate privileges via a hardcoded password for the...9.8 Critical
- usr usr-g800v2 firmware, usr-g806 firmware, usr-g807 firmware +2 more +4 moreUSR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded...9.8 Critical
- kuka kr c4, kss, kr c4 firmware +1 more +3 moreKUKA KR C4 - Use of Hard-Coded Credentials8.8 High
- kuka kr c4, kss, kr c4 firmware +1 more +3 moreKUKA KR C4 - Use of Hard-Coded Credentials9.8 Critical
- telecommunication software samwin contact center suite, telecomsoftware samwin contact center, samwin agent +2 moreTelecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials6.5 Medium
- pagerduty rundeckUse of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise9.1 Critical
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default administrator password for the web interface and serial port was reported in some...8.8 High
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default password for the serial port was reported in some Lenovo Personal Cloud Storage...6.8 Medium
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...9.8 Critical
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and...7.5 High
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreA hard-coded password vulnerability exists in the console infactory functionality of InHand...4.3 Medium
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreAn information disclosure vulnerability exists in the router configuration export functionality...6.3 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access...5.6 Medium
- ping identity pingid integration for windows loginPingID Integration for Windows Login MFA Bypass6.4 Medium
- automationanywhere automation 360A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA...7.5 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Hardcoded Credentials in Charge Controller9.8 Critical
- apache doris, apache software foundation doris(incubating) +1 moreApache Doris hardcoded cryptography initialization7.5 High
- terra-master tosIn Terramaster F4-210, F2-210 TOS 4.2.X (4.2.15-2107141517), an attacker can self-sign session...8.1 High
- asus webstorageASUS WebStorage - Use of Hard-coded Credentials7.3 High
- cisco umbrella virtual appliance, umbrella insights virtual appliance +1 moreCisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability7.5 High
- databasir project databasirDatabasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.7.4 High
- zoho manageengine, zohocorp manageengine adselfservice plus +1 moreZoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote...6.8 Medium
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus3.3 Low
- swift sensors gateway, swiftsensors sg3-1010 firmware +1 moreAn authentication bypass vulnerability exists in the device password generation functionality of...10.0 Critical
- moxa mxview, mxview series +1 moreAn authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView...10.0 Critical
- citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +12 more +14 moreHard-coded credentials allow administrators to access the shell via the SD-WAN CLI2.7 Low
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user...7.1 High
- secom dr.id access control, taiwan secom co., ltd., personnel attendance management system, secom dr.id attendance system +2 moreTAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials7.3 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of...7.8 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1,...9.1 Critical
- gitlabA hardcoded password was set for accounts registered using an OmniAuth provider (e.g. OAuth, LDAP...9.1 Critical
- bettinivideo sgsetupBettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across...9.8 Critical
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...9.8 Critical
- totolink a3100r firmwareIn totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official...8.8 High
- baicells neutrino 430 firmware, nova436q firmware +1 moreBaicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded...9.8 Critical
- nuuo network video recorder firmwareUNNO v03.11.00 was discovered to contain access control issue.9.8 Critical
- alf-bancoALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite...9.1 Critical
- ge ur bootloader binaryGE UR family hardcoded credentials8.4 High
- garo wallbox glb firmware, wallbox gtb firmware, wallbox gtc firmware +2 moreMultiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded...9.8 Critical
- ge reason rt43x clocks, rt430 firmware, rt431 firmware +1 more +3 moreGE Reason RT43X Clocks Use of Hard-coded Cryptographic Key5.3 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key5.3 Medium
- Show moreLoading…