CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, motion control setting(gx works3 related software) +1 more +3 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gx works3Use of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...6.8 Medium
- mitsubishi electric corporation gt designer3 version1 (got2000), gx works3, mt works2 +2 moreUse of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 all versions allows an...5.6 Medium
- zyxel lte3301-m209, lte3301-m209 firmware +1 moreA flaw in the Zyxel LTE3301-M209 firmware verisons prior to V1.00(ABLG.6)C0 could allow a remote...9.8 Critical
- kaden picoflux air, kadenvodomery picoflux air firmware +1 moreHardcoded credentials in Kaden PICOFLUX AiR6.5 Medium
- pattersondental eaglesoftPatterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: ...7.8 High
- becton dickson (bd) bd totalys multiprocessor, bd totalys multiprocessor firmware +1 moreBD Totalys MultiProcessor - Hardcoded Credentials6.6 Medium
- cisco secure email, secure email and web manager, secure web appliance +1 more +3 moreA vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco...4.7 Medium
- fortinet fortisiemA improper authentication vulnerability in Fortinet FortiSIEM before 6.5.0 allows a local...7.8 High
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreA hard-coded password vulnerability exists in the telnet functionality of Abode Systems, Inc....9.8 Critical
- abode systems, inc. iota all-in-one security kit, goabode iota all-in-one security kit firmware +1 moreAn authentication bypass vulnerability exists in the web interface /action/factory* functionality...8.6 High
- juiker, juiker app +1 moreJuiker app - Hard-coded Credentials5.5 Medium
- lanner inc iac-ast2500a, lannerinc iac-ast2500 firmware +1 moreHard-coded TLS Certificate5.8 Medium
- pctechsoft pcsecureIn PCTechSoft PCSecure V5.0.8.xw, use of Hard-coded Credentials in configuration files leads to...7.8 High
- tp-link ax10 firmwareThe web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when...5.9 Medium
- go-admingo-admin (aka GO Admin) 2.0.12 uses the string go-admin as a production JWT key.9.8 Critical
- adobe coldfusionAdobe ColdFusion Use of Hard-coded Credentials Application denial-of-service7.5 High
- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An...7.5 High
- flyte flyteadminDefault OAuth Authorization Server secret in FlyteAdmin4.8 Medium
- cisco sd-wan vmanage, sd-wan +1 moreCisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability5.3 Medium
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreUse of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server.9.8 Critical
- carlo gavazzi cpy car park server, uwp 3.0 monitoring gateway and controller, uwp 3.0 monitoring gateway and controller – edp version +2 more +4 moreHard-coded credentials in Carlo Gavazzi UWP3.0 allows for authentication bypass and full control of the device9.8 Critical
- contec fxa2000 firmware, fxa3000 firmware, fxa3020 firmware +1 more +3 moreContec FXA3200 version 1.13 and under were discovered to contain a hard coded hash password for...8.8 High
- delta electronics diaenergy, deltaww diaenergie +1 moreDelta Electronics DIAEnergy Use of Hard-coded Credentials9.8 Critical
- totolink t6 firmwareIn TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow...9.8 Critical
- pentasecurity wapplesPenta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges...7.8 High
- pentasecurity wapplesWAPPLES through 6.0 has a hardcoded systemi account accessible via db/wp.no1 (as configured in...9.8 Critical
- pentasecurity wapplesPenta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access...8.8 High
- contec health cms8000 contec icu ccu vital signs patient monitor, contechealth cms8000 firmware +1 moreContec Health CMS80004.3 Medium
- hauk project haukbilde2910 Hauk v1.6.1 requires a hardcoded password which by default is blank. This hardcoded...7.5 High
- allied telesis k.k. centrecom ar260s v2, allied-telesis centrecom ar260s firmware +1 moreUse of hard-coded credentials for the telnet server of CentreCOM AR260S V2 firmware versions...9.8 Critical
- totolink a3002r firmwareIn TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 in the shadow.sample file, root is...9.8 Critical
- totolink a860r firmwareIn TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow...7.5 High
- xxyopen novel-plusNovel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config...9.8 Critical
- honeywell controledge plc firmware, controledge rtu firmware +1 moreHoneywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056,...9.8 Critical
- le-yan co., ltd. personnel and salary management system, leyan salary management system +1 moreLe-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password9.8 Critical
- seiko-sol skybridge mb-a200 firmwareSeiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded...9.8 Critical
- seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +1 moreSeiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root...9.8 Critical
- totolink a810r firmwareTOTOLINK A810R V4.1.2cu.5182_B20201026 and V5.9c.4050_B20190424 was discovered to contain a...7.8 High
- totolink a3000ru firmwareTOTOLINK A3000RU V4.1.2cu.5185_B20201128 was discovered to contain a hardcoded password for root...7.8 High
- totolink a860r firmwareTOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at...7.8 High
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a hardcoded password for root at...7.8 High
- totolink a950rg firmwareTOTOLINK A950RG V4.1.2cu.5204_B20210112 was discovered to contain a hardcoded password for root...7.8 High
- totolink a800r firmwareTOTOLINK A800R V4.1.2cu.5137_B20200730 was discovered to contain a hardcoded password for root at...7.8 High
- totolink a720r firmwareTOTOLINK A720R V4.1.5cu.532_B20210610 was discovered to contain a hardcoded password for root at ...7.8 High
- trendnet tew733gr firmwareTrendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d...9.8 Critical
- dlink dir-845l firmwareD-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d...9.8 Critical
- nortekcontrol emerge e3 firmwareNortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that...8.2 High
- malighting grandma2 light firmwareMA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's...8.8 High
- Show moreLoading…