CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- yooooomi your spotifyAuthentication Bypass Because of Hardcoded JWT Secret in your_spotify9.1 Critical
- ailux imx6, imx6 bundle +1 moreA CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web...8.1 High
- elinksmart esmartcamThe Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES...7.5 High
- yealink configuration encryption toolInsecure AES key in Yealink Configuration Encrypt Tool below verrsion 1.2. A single, vendorwide,...9.8 Critical
- totolink x6000r, x6000r firmware +1 moreTotolink X6000R shadow hard-coded credentials2.5 Low
- laborofficefreeEncrypted database credentials in LaborOfficeFree6.8 Medium
- utarit solipay mobile, solipay mobile app +1 moreHardcoded Credentals in SoliClub Mobile App7.5 High
- inprax izzi connectHard-coded credentials in iZZi connect application9.8 Critical
- comarch erp xlHardcoded password in Comarch ERP XL7.5 High
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreCWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access...7.7 High
- siemens location intelligence perpetual large, location intelligence perpetual medium, location intelligence perpetual non-prod +6 more +8 moreA vulnerability has been identified in Location Intelligence Perpetual Large (9DE5110-8CA13-1AX0)...9.8 Critical
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service information disclosure6.2 Medium
- schuhfriedAn issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via...9.8 Critical
- dlink go-rt-ac750 firmwareD-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account...9.8 Critical
- rapid software llc scada, rapidscada rapid scada +1 moreUse of Hard-Coded Credentials in Rapid SCADA9.8 Critical
- machinesense feverwarn, feverwarn firmware +1 moreMachineSense FeverWarn Use of Hard-coded Credentials9.1 Critical
- gessler gmbh web-master, gesslergmbh web-master firmware +1 moreUse of Hard-coded Credentials in Gessler GmbH WEB-MASTER9.8 Critical
- totolink a8000ru firmwareTOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root...9.8 Critical
- html-js doracmsDoraCMS 2.1.8 is vulnerable to Use of Hard-coded Cryptographic Key.9.8 Critical
- synaptics fingerprint driverEncryption key derived from static host information5.2 Medium
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation Hardcoded Credentials9.8 Critical
- spoon radio japan inc. android spoon application, spooncast spoon +1 moreAndroid Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a...5.5 Medium
- hitron systems dvr dvr lguvr-16h, hitron lguvr-16h firmware +1 moreHitron Systems DVR LGUVR-16H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr lguvr-8h, hitron lguvr-8h firmware +1 moreHitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr lguvr-4h, hitron lguvr-4h firmware, hitronsystems dvr lguvr-4h firmware +2 moreHitron Systems DVR LGUVR-4H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-16781, hitron hvr-16781 firmware +1 moreHitron Systems DVR HVR-16781 Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-8781, hitron hvr-8781 firmware +1 moreHitron Systems DVR HVR-8781 Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-4781, hitron hvr-4781 firmware +1 moreHitron Systems DVR HVR-4781 Improper Input Validation Vulnerability7.4 High
- ubeeinteractive ddw365 firmwareUbee DDW365 XCNDDW365 and DDW366 XCNDXW3WB devices have predictable default WPA2 PSKs that could...8.8 High
- evershopEverShop at risk to unauthorized access via weak HMAC secret9.1 Critical
- joynext mib3 infotainment unit, skoda-auto superb 3 firmware +1 moreHard-coded password for UDS services4.0 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 morePredictable encryption passphrase used in publicly accessible configuration file7.5 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 morePredefined root password9.8 Critical
- flient smart lock advanced firmwareFlient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default...6.8 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to authenticate to the SSH service with root...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to authenticate to the web application with high...8.1 High
- appwrite command line interfaceApprite CLI makes Use of Hard-coded Credentials5.5 Medium
- ibm storage fusion hciIBM Storage Fusion HCI information disclosure6.5 Medium
- automaticsystems soc fl9600 firstlane firmwareAn issue in Automatic Systems SOC FL9600 FastLine v.lego_T04E00 allows a remote attacker to...7.5 High
- peplink balance two firmwareAn issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses...6.4 Medium
- fedirtsapana simple http server, simple http server plus +1 morePhlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka...6.3 Medium
- fedirtsapana simple http server plusPhlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android...4.6 Medium
- buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 moreVR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an...4.6 Medium
- pexip virtual meeting roomsIn Pexip VMR self-service portal before 3, the same SSH host key is used across different...5.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure4.0 Medium
- paxton net2When installing the Net2 software a root certificate is installed into the trusted store. A...8.1 High
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Hard-coded Cryptographic Key9.8 Critical
- multisuns easylog web+, easylog web\+, easylog web\+ firmware +2 moreMultisuns EasyLog web+ - Use of Hard-coded Password9.8 Critical
- smartstar software cws web-base, csharp cws collaborative development platform +1 moreSmartStar Software CWS Web-Base - Use of Hard-coded Credentials6.5 Medium
- zoom, zoom meeting software development kit, video software development kit +1 more +3 moreCryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for...4.9 Medium
- Show moreLoading…