CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerpath management appliancePowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys...6.0 Medium
- dell supportassist for business pcs, supportassist for home pcs, supportassist client consumer +2 moreDell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs ...5.5 Medium
- keystorage global facilities management softwareHardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software...9.1 Critical
- samsung android, samsung mobile devices +1 moreHardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows...4.3 Medium
- westerndigital my cloud osWestern Digital My Cloud devices before OS5 have a nobody account with a blank password.9.8 Critical
- totolink t8 firmwareTOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet...7.5 High
- totolink n200re-v5 firmwareA vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to...9.8 Critical
- selfwealthSelfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application...7.5 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege...7.8 High
- totolink a830r firmwareAn information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to...5.5 Medium
- artica pfms pandora fms, pandora fms fms +1 moreLimited Authentication bypass due to hardcoded secret5.6 Medium
- baicells nova 227, nova 233, nova 243 +2 more +4 moreHard Coded Credential Crypt Vulnerability10.0 Critical
- cisco industrial network directorA vulnerability in the monitoring application of Cisco Industrial Network Director could allow an...8.8 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.0 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password...8.4 High
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-4544410.0 Critical
- maif izanamiIzanami is vulnerable to Authorization Bypass9.8 Critical
- exfo bv-10 performance endpoint unit, bv-10 firmware +1 moreEXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.9.8 Critical
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.0 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Local Security Authority (LSA) Elevation of Privilege Vulnerability7.8 High
- zoom rooms, zoom video communications inc rooms for macos +1 moreInsecure key generation for Zoom Rooms for macOS Clients4.4 Medium
- hitachi energy foxman-un, unem +1 moreHardcoded credential is found in the message queue7.1 High
- hitachi energy foxman-un, unem +1 moreThe affected products store public and private key that are used to sign and protect custom parameter set files from modification.8.0 High
- hitachi energy foxman-un, unem +1 moreUse of default key for encryption7.1 High
- 1panel-dev kubepiKubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token9.8 Critical
- merit lilin ent. co., ltd. ah55b04 dvr firmware, ah55b08 dvr firmware, meritlilin ah55b04 firmware +1 more +3 moreMerit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials9.8 Critical
- empress project empresstaoeffect Empress hard-coded password6.3 Medium
- elvexys isos, isos firmware +1 morehard coded credentials in elvexys ISOS firmwares4.5 Medium
- dahuasecurity dhi-dss4004-s2 firmware, dhi-dss7016d-s2 firmware, dhi-dss7016dr-s2 firmware +2 more +4 moreSome Dahua software products have a vulnerability of using of hard-coded cryptographic key. An...7.5 High
- nokia fastmile firmwareNokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin...8.4 High
- click studios passwordstate, passwordstate browser extension chrome +1 moreClick Studios Passwordstate hard-coded credentials4.3 Medium
- netgear rax30 firmwareA support user exists on the device and appears to be a backdoor for Technical Support staff. The...8.8 High
- mutinyMutiny 7.2.0-10788 suffers from Hardcoded root password.9.8 Critical
- solarwinds serv-u, serv-u ftp server +1 moreCommon Key Vulnerability in Serv-U FTP Server7.5 High
- delta electronics industrial automation dialink, deltaww dialink +1 moreDelta Industrial Automation DIALink versions 1.4.0.0 and prior are vulnerable to the use of a...9.8 Critical
- daikin svmpc1, svmpc2 +1 moreDaikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to an...9.8 Critical
- buffalo hw-450hp-zwe firmware, wzr-300hp firmware, wzr-450hp-cwt firmware +7 more +9 moreUse of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network...6.5 Medium
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials Vulnerability8.3 High
- ami megarac spx12, megarac spx13, megarac sp-x +2 moreMegaRAC Default Credentials Vulnerability7.5 High
- mobatek mobaxtermWhen aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server....9.1 Critical
- veritas access appliance, netbackup flex scale appliance +1 moreAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through...8.8 High
- book store management system project store management systemBook Store Management System v1.0 was discovered to contain hardcoded credentials which allows...9.8 Critical
- sanitization management system project management systemSanitization Management System v1.0 was discovered to contain hardcoded credentials which allows...9.8 Critical
- realtek rtl8111ep-cg, rtl8111fp-cg, rtl8111ep-cg firmware +1 more +3 moreRealtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials2.1 Low
- webcash serp server 2.0ERP solution Remote Code Execution Vulnerability8.1 High
- mitsubishi electric corporation gx works3Use of Hard-coded Password vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1...7.5 High
- mitsubishi electric corporation gx works3, motion control setting(gx works3 related software) +1 moreUse of Hard-coded Cryptographic Key vulnerability in Mitsubishi Electric GX Works3 all versions...9.1 Critical
- Show moreLoading…