CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- mapgis igserverMapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion.8.1 High
- mapgis igserverMapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of...8.8 High
- dotnetcore agileconfigUse of Hard-coded Credentials in AgileConfig.Client9.8 Critical
- device42 cmdbHardcoded encryption key IV in Exago WebReportsApi.dll7.1 High
- hj holdings, inc. 'hulu / フールー' app for android, hjholdings hulu +1 more'Hulu / ????' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded...7.5 High
- ivanti connect secure, pulsesecure pulse connect secure +1 moreIn Ivanti Pulse Secure Pulse Connect Secure (PCS) before 9.1R12, the administrator password is...7.2 High
- totolink a3002ru firmwareTOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.9.8 Critical
- tcl linkhub mesh wifi, linkhub mesh wifi ac1200 +1 moreA hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd...7.5 High
- totolink a3600r firmwareTotolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc...9.8 Critical
- itpison omicard edm, omicard edm project edm +1 moreITPison OMICARD EDM - Use of Hard-coded Credentials9.8 Critical
- veeam backup and recoveryThis vulnerability allows remote attackers to bypass authentication on affected installations of...9.8 Critical
- honeywell safety manager firmwareHoneywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022...4.6 Medium
- ovarro tbox, twinsoft, tbox lt2-530 firmware +6 more +8 moreOvarro TBox Use of Hard-coded Cryptographic Key7.5 High
- veritas netbackupIn Veritas NetBackup OpsCenter, a hard-coded credential exists that could be used to exploit the...8.4 High
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 has default credentials. It exposes an SSH interface...9.8 Critical
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 ships with a hardcoded SSH private key and...9.8 Critical
- motorola ace1000 firmwareThe Motorola ACE1000 RTU through 2022-05-02 uses ECB encryption unsafely. It can communicate with...9.8 Critical
- bakerhughes bently nevada 3701\/40 firmware, bently nevada 3701\/44 firmware, bently nevada 3701\/46 firmware +1 more +3 moreThe Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a...9.8 Critical
- emerson openbsiEmerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- emerson deltav distributed control system sq controller firmware, deltav distributed control system sx controller firmware, se4002s1t2b6 high side 40-pin mass i\/o terminal block firmware +21 more +23 moreThe Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29...5.5 Medium
- filewaveA hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2....7.5 High
- filewaveAn authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2....9.8 Critical
- ibm security verify information queueIBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password...6.8 Medium
- atlassian confluence, questions for confluence +1 moreThe Atlassian Questions For Confluence app for Confluence Server and Data Center creates a...9.8 Critical
- wavlink wl-wn530hg4 firmwareWavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption...9.8 Critical
- micodus mv720, mv720 firmware +1 moreICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials9.8 Critical
- goldshell miner firmwareGoldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow...9.8 Critical
- fortinet fortiddosA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiDDoS API 5.5.0 through 5.5...8.1 High
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Information disclosure hard coded credentials.5.7 Medium
- nexans gigaswitch 641 desk v5 sfp-vi firmware, gigaswitch 642 desk v5 sfp-2vi firmware, gigaswitch v5 2tp\(pd-f\+\) sfp-vi 54vdc firmware +10 more +12 morelibnx_apl.so on Nexans FTTO GigaSwitch before 6.02N and 7.x before 7.02 implements a Backdoor...9.8 Critical
- infiray iray-a8z3 firmwareAn issue was discovered in Infiray IRAY-A8Z3 1.0.957. The binary file /usr/local/sbin/webproject...9.8 Critical
- chcnav - p5e gnss, p5e gnss firmware +1 moreChcnav - P5E GNSS Information disclosure5.3 Medium
- isode swiftIsode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor. This...7.5 High
- verizon lvskihp indoorunit firmware, lvskihp outdoorunit firmware +1 moreOn Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices,...7.5 High
- kvf-admin project kvf-adminkvf-admin through 2022-02-12 allows remote attackers to execute arbitrary code because...9.8 Critical
- ibm qradar network securityIBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password...6.8 Medium
- ibm security siteprotector systemIBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or...6.8 Medium
- alibaba nacosUse of Hard-coded Credentials in Nacos8.8 High
- omron sysmac studio, na5-12w firmware, na5-15w firmware +55 more +57 moreUse of hard-coded credentials vulnerability exists in Machine automation controller NJ series all...8.1 High
- edimax ic-3140w firmwareThe firmware of EDIMAX IC-3140W Version 3.11 is hardcoded with Administrator username and password.9.8 Critical
- yokogawa stardom fcj firmware, stardom fcn firmware, yokogawa electric corporation stardom controller +2 moreUse of hard-coded credentials vulnerability exists in STARDOM FCN Controller and FCJ Controller...7.2 High
- southrivertech titan ftp server nextgenAn issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. There is Remote Code...9.8 Critical
- proietti planet time enterpriseProietti Tech srl Planet Time Enterprise 4.2.0.1,4.2.0.0,4.1.0.0,4.0.0.0,3.3.1.0,3.3.0.0 is...9.8 Critical
- antminer monitor project monitorA vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside...9.8 Critical
- ge voluson s8, voluson s8 firmware +1 moreGE Voluson S8 Service Browser hard-coded credentials5.9 Medium
- siemens teamcenter, teamcenter v12.4, teamcenter v13.0 +4 more +6 moreA vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.13), Teamcenter...8.8 High
- siemens spectrum power 4, spectrum power 7, spectrum power mgms +1 more +3 moreA vulnerability has been identified in Spectrum Power 4 (All versions using Shared HIS), Spectrum...8.8 High
- rakuten casaRakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a...9.8 Critical
- Show moreLoading…