CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- enphase installer toolkitEnphase Installer Toolkit Android App Use of Hard-coded Credentials8.6 High
- hewlett packard enterprise (hpe) hpe insight remote support, hpe insight remote support +1 moreA security vulnerability in HPE Insight Remote Support may result in the local disclosure of...5.5 Medium
- nokia asika airscale firmwareAn issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN...6.3 Medium
- otcmsOTCMS hard-coded password6.3 Medium
- rockwell automation factorytalk system services, rockwellautomation factorytalk policy manager +1 moreRockwell Automation FactoryTalk System Services Vulnerable To Use Of Hard-Coded Cryptographic Key7.3 High
- siemens cp-8031 master module, cp-8050 master module, cpci85 firmware +2 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050...6.8 Medium
- mitsubishi electric corporation melsec iq-f series ethernet/ip module fx5-enet/ip, melsec iq-r series ethernet/ip module rj71eip91, mitsubishielectric fx5-enet\/ip firmware +3 more +5 moreAuthentication bypass vulnerability in MELSEC iQ-R Series / iQ-F Series EtherNet/IP Modules6.2 Medium
- hitron technologies inc. coda-5310, hitrontech coda-5310 firmware +1 moreHitron Technologies Inc. CODA-5310 - Hard-coded Cryptographic Key7.2 High
- sprecher automation sprecon-e cpu mc33/34, sprecon-e cpu pu243x, sprecon-e cpu pu244x +10 more +12 moreSprecher: Sprecon maintenance access with hardcoded credentials9.8 Critical
- draytek myvigor, vigor1000b firmware, vigor130 firmware +69 more +71 moreDraytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below...9.8 Critical
- saison dataspider servistaDataSpider Servista version 4.4 and earlier uses a hard-coded cryptographic key. DataSpider...8.8 High
- netskope clientROZCOM client6.2 Medium
- kubernetes minikube[minikube] ssh server with default password8.4 High
- jins inc. meme core, jins meme firmware +1 moreJINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may...6.5 Medium
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreUse of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10...7.2 High
- birddog 4k quad, 4k quad firmware, a300 eyes +5 more +7 moreFiles present on firmware images could allow an attacker to gain unauthorized access as a...8.4 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro versions prior to 7.2 have their own locally...8.3 High
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Hardcoded Credential Vulnerability9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical...9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard...9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard...7.5 High
- fortinet fortinac, fortinac-f +1 moreA use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC...6.1 Medium
- echa.europa iuclidEuropean Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak...9.8 Critical
- sage 300Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user...9.8 Critical
- sage 300The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte...7.5 High
- sage 300The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded...7.5 High
- sage 300The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard...9.8 Critical
- synopsys code dxImpersonation through User-Controlled Token9.8 Critical
- zohocorp manageengine access manager plus, manageengine pam360, manageengine password manager pro +2 moreStatic credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP)...7.8 High
- fighting cock information system project cock information systemAn issue was discovered in Fighting Cock Information System 1.0, which uses default credentials,...9.8 Critical
- pwsdashboard personal weather station dashboardPWS Personal Weather Station Dashboard (PWS_Dashboard) LTS December 2020 (2012_lts) allows remote...7.2 High
- nuxtlabs nuxt, nuxtlabs/github-module +1 moreUse of Hard-coded Credentials in nuxtlabs/github-module10.0 Critical
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Hardcoded Credentials9.8 Critical
- tp-link tapo c310 firmwareTP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User ---...7.5 High
- wolt delivery: food and more, delivery +1 moreAndroid App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials...7.8 High
- getnexx nxal-100 firmware, nxg-100b firmware, nxg-200 firmware +4 more +6 moreCVE-2023-17489.3 Critical
- rocket software unidata, universe +1 moreAuthentication bypass in UniRPC's udadmin service9.8 Critical
- propump and controls, inc. osprey pump controller, propumpservice osprey pump controller firmware +1 moreCVE-2023-286549.8 Critical
- varta element backup firmware, element s1 firmware, element s2 firmware +12 more +14 moreVARTA: Multiple devices prone to hard-coded credentials9.8 Critical
- mgt-commerce cloudpanelMGT-COMMERCE CloudPanel Shared Certificate8.1 High
- propius machineselectorA Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0...9.8 Critical
- panindex project panindexPanindex uses hard coded cyptographic key9.8 Critical
- akuvox e11, e11 firmware +1 moreCVE-2023-03459.8 Critical
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreUse of Hard-coded Credentials in alextselegidis/easyappointments6.5 Medium
- dos-osaka rakuraku pc cloud agent, ss1, dos co., ltd. ss1 and rakuraku pc cloud +2 moreUse of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC...9.8 Critical
- gradio-app gradioGradio contains Use of Hard-coded Credentials5.4 Medium
- thingsboardThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded...8.1 High
- prolink2u prs1841 firmwareProlink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP...9.8 Critical
- echelon i.lon vision, enocean smartserver +1 moreEnOcean SmartServer Hard-coded credentials6.3 Medium
- bosswerk inverter, inverter firmware +1 moreDeye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password3.9 Low
- Show moreLoading…