CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- vaxilu x-uiAn issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password.7.5 High
- netis-systems wf2409e, wf2409e firmware +1 moreAn issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary...9.8 Critical
- i-doiti-doit pro 25 and below and I-doit open 25 and below are configured with insecure default...9.8 Critical
- fortinet fortitesterA use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may...5.0 Medium
- xpand-it write-back managerXpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which...6.5 Medium
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in multiple /irmdata/api/ endpoints6.5 Medium
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in RDPWin.dll7.7 High
- resort data processing, inc. irm next generation, resortdata internet reservation module next generation +1 moreUse of Hard-coded Credentials in RDPCore.dll9.9 Critical
- tp-link archer c50, archer c55, archer c55 firmware +1 more +3 moreArcher C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions...8.8 High
- superstorefinder super store finderA hard coded password in Super Store Finder v3.6 allows attackers to access the administration...9.8 Critical
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Hardcoded Credential7.5 High
- schweitzer engineering laboratories sel-5037 sel grid configurator, sel-5033 acselerator rtac software +1 moreUse of Hard-coded Credentials7.7 High
- motorola mbts base radio, mbts base radio firmware +1 moreMotorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man...8.4 High
- motorola mbts site controller, mbts site controller firmware +1 moreMotorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site...9.4 Critical
- spotcam co., ltd. fhd 2, myspotcam fhd 2 firmware, spotcam co ltd fhd2 +2 moreSpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -29.8 Critical
- spotcam co., ltd. fhd 2, myspotcam fhd 2 firmware, spotcam co ltd fhd2 +2 moreSpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -19.8 Critical
- gravitl netmakerNetmaker has Hardcoded DNS Secret Key7.5 High
- sick lms5xx, lms500 firmware, lms511 firmware +1 more +3 moreThe LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote...9.8 Critical
- jupyter notebook, lenovo ideapad 1-14ijl7 firmware, ideapad 1-15ijl7 firmware +85 more +87 moreA potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models...6.7 Medium
- arubanetworks edgeconnect sd-wan orchestratorShared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator7.4 High
- nvki intelligent broadband subscriber gatewayN.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a hardcoded root password which...9.8 Critical
- moxa nport iaw5000a-i/o series, nport iaw5000a-i\/o firmware +1 moreNPort IAW5000A-I/O Series Hardcoded Credential Vulnerability5.4 Medium
- dataprobe iboot pdu, cyberpower powerpanel server, dataprobe iboot-pdu4-c20 firmware +21 more +23 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to...6.7 Medium
- dataprobe iboot pdu, iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware +20 more +22 moreThe Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded...6.7 Medium
- intel unisonUse of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow...5.5 Medium
- audiocodes 405hd firmware, 445hd firmware, c435hd firmware +4 more +6 moreAn issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due...7.5 High
- audiocodes 405hd firmware, 445hd firmware, c435hd firmware +4 more +6 moreAn issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a...7.5 High
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels4.9 Medium
- phoenix contact wp 6070-wvps, wp 6101-wxps, wp 6121-wxps +9 more +11 morePHOENIX CONTACT: Use of Hard-coded Credentials in WP 6xxx Web panels3.8 Low
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +118 more +120 moreKey Management Errors in HLOS7.7 High
- connectedio connected ioConnected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's...9.8 Critical
- assaabloy control id idsecureControl ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and...9.8 Critical
- jbl soundbar multibeam, bar 5.1 surround firmware +1 moreJBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials6.2 Medium
- synel synergy fingerprint terminals, synergy\/a firmware +1 moreSynel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials9.8 Critical
- teleadapt roomcast ta-2400, roomcast ta-2400 firmware +1 moreTeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password (PIN):...9.8 Critical
- fujitsu ip-90, ip-90 firmware, ip-920d firmware +16 more +18 moreFujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow...7.5 High
- openlibraryfoundation mod-remote-storageFOLIO mod-remote-storage Hard Coded Credentials5.3 Medium
- openlibraryfoundation mod-data-export-springFOLIO mod-data-export-spring Hard-Coded Credentials9.1 Critical
- galaxy software services vitals esp, gss vitals enterprise social platform +1 moreGalaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key8.6 High
- iagona scrutiswebIagona ScrutisWeb Use of Hard-coded Cryptographic Key5.5 Medium
- sonicwall analytics, gms, global management system +2 moreUse of Hard-coded Cryptographic Key vulnerability in SonicWall GMS, SonicWall Analytics. This...7.5 High
- samrtsoft smartbpm.netSmartBPM.NET - Use of Hard-Coded Credentials - 29.1 Critical
- samrtsoft smartbpm.netSmartBPM.NET - Use of Hard-Coded Credentials - 19.8 Critical
- piigab m-bus softwarepack, m-bus 900s, m-bus 900s firmware +2 morePiiGAB M-Bus Use of Hard-coded Credentials9.8 Critical
- ami megarac sp-x, megarac spx +1 moreUsage of Hard-coded Credentials6.6 Medium
- ami megarac sp-x, megarac spx +1 morehard coded cryptographic key7.1 High
- loxone miniserver go gen 2, miniserver go gen 2 firmware +1 moreThe root password of the Loxone Miniserver Go Gen.2 before 14.2 is calculated using hard-coded...7.8 High
- stalin-143 website, kingstemple the king\'s temple church website +1 moreThe King's Temple Church website Leaked Stripe API Key in Public Code Repository7.5 High
- newspicks, inc. "newspicks" app for android, "newspicks" app for ios, uzabase newspicks +2 more"NewsPicks" App for Android versions 10.4.5 and earlier and "NewsPicks" App for iOS versions 10.4...5.5 Medium
- advantech r-seenetAdvantech R-SeeNet Use of Hard-coded Credentials9.8 Critical
- Show moreLoading…