CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- prolion cryptospikeHidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login...7.2 High
- prolion cryptospikeA hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion...7.5 High
- senec storage box v1, enbw senec storage box firmware, senec storage box v2 +1 more +3 moreSENEC: Storage Box V1,V2 and V3 using default credentials9.8 Critical
- netscout ngeniuspulseNETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.9.8 Critical
- supermicro b12dpe-6 firmware, b12dpt-6 firmware, b12spe-cpu-25g firmware +359 more +361 moreThe configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard...8.8 High
- unitronics visilogic, samba 3.5 firmware, samba 4.3 firmware +15 more +17 moreUnitronics VisiLogic uses a default administrative password9.8 Critical
- sierrawireless aleosUse of hardcoded certificate and private key8.1 High
- sierrawireless aleosUse of Hard-Coded Credentials8.1 High
- joynext mib3 infotainment unit, preh mib3 firmware +1 moreHard-coded password for access to power controller chip memory3.5 Low
- zumtobel netlink ccd firmwareZumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials...9.8 Critical
- bd facschorusHardcoded Secrets4.1 Medium
- h-mdm headwind mdmHeadwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT...8.8 High
- microsoft powershell, powershell 7.2, powershell 7.3 +1 more +3 morePowerShell Information Disclosure Vulnerability6.5 Medium
- dell e-lab navigator, mobility - e-lab navigator +1 moreDell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local...8.4 High
- first co., ltd. cfr-4eab, cfr-8eab, cfr-16eab, c-first cfr-1004ea firmware, cfr-1008ea firmware +36 more +38 moreFirst Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated...9.8 Critical
- superagiSuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This...7.5 High
- archerydms archeryArchery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES...7.5 High
- fortinet fortianalyzer, fortimanager +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 -...4.1 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7...4.4 Medium
- natus sleepworks, neuroworks eeg +1 moreNatus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the...9.8 Critical
- appsanywhere clientSymmetric encryption used to protect messages between the AppsAnywhere server and client can be...8.0 High
- weintek easybuilder proWeintek EasyBuilder Pro Use of Hard-coded Credentials9.8 Critical
- tangyh lamp-cloudDromara Lamp-Cloud Use of Hard-coded Cryptographic Key9.8 Critical
- vinchin backup and recoveryVinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded...9.8 Critical
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreHardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/...9.8 Critical
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key7.1 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to...8.8 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify...7.8 High
- tibco hawk, hawk distribution for tibco silver fabric, operational intelligence hawk redtail +1 more +3 moreTIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability7.4 High
- dromara surenessSureness uses hardcoded key9.8 Critical
- ibm security verify governanceIBM Security Verify Governance information disclosure6.8 Medium
- sonicwall sonicosSonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.7.5 High
- ibm security verify governanceIBM Security Verify Governance information disclosure5.3 Medium
- micro research ltd. mr-gm2, mr-gm3 (-d/-k/-s/-dk/-dks/-m/-w), mrl mr-gm2 firmware +6 more +8 moreUse of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 ...4.3 Medium
- qbittorrent, qbittorrent client +1 moreqBittorrent Web UI Default Credentials Lead to RCE9.8 Critical
- f5 big-ip next spk, big-ip next service proxy for kubernetes +1 moreBIG-IP Next SPK SSH vulnerability7.4 High
- siemens cp-8031 master module, cp-8050 master module, cp-8031 firmware +1 more +3 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only...9.8 Critical
- qognify nicevisionQognify NiceVision Use of Hard-coded Credentials10.0 Critical
- cisco emergency responderA vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to...9.8 Critical
- sage 200 spainUse of Cleartext credentials in Sage 200 Spain7.8 High
- riello ups netman-204, riello-ups netman 204 firmware +1 moreAdmin password reset in NetMan 2048.1 High
- microweber, microweber microweber/microweber +1 moreUse of Hard-coded Credentials in microweber/microweber5.8 Medium
- cisco sd-wan vmanage, sd-wan +1 moreVulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could...7.5 High
- metersphereWeak password of selenium VNC in MeterSphere4.6 Medium
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreVault Key Partially Predetermined7.8 High
- d-link d-view 8Authentication Bypass in D-Link D-View 89.8 Critical
- ormazabal ekorccp, ekorrci, ekorccp firmware +1 more +3 moreImproper Access Control in Ormazabal products9.4 Critical
- technicolor tg670, tg670 firmware +1 moreTechnicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One...7.2 High
- juplink rx4-1500, rx4-1500 firmware +1 moreJuplink RX4-1500 Hard-coded Credential Vulnerability6.3 Medium
- peppermintAn issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain...8.8 High
- Show moreLoading…