CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- schneider electric ecostruxure it gatewayCWE-798: Use of hard-coded credentials vulnerability exists that could cause local privilege...7.8 High
- apache submarine, apache software foundation submarine commons utils +1 moreApache Submarine Commons Utils: default secret9.8 Critical
- veeam recovery orchestratorHard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator9.0 Critical
- estomed simple careHardcoded password in Estomed Sp. z o.o. Simple Care software9.3 Critical
- dreryk gabinetHardcoded password in drEryk Gabinet9.3 Critical
- eurosoft przychodnia, eurosoftsp.zo.o eurosoft przychodina +1 moreHardcoded password in Eurosoft Przychodnia9.3 Critical
- precor p82Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the...8.0 High
- precor p82Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive...8.8 High
- precor p82Precor touchscreen console P82 contains a private SSH key that corresponds to a default public...8.8 High
- precor p62, p80, p82 +2 morePrecor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local...7.8 High
- man-group dtale, man-group/dtale, man d-tale +2 moreAuthentication Bypass and RCE in man-group/dtale9.8 Critical
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials...8.1 High
- totolink cp300\+, cp300 firmware +1 moreTOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in ...9.8 Critical
- minmax, minmax digital technology cms +1 moreMinMax CMS - Hidden Functionality9.8 Critical
- aptos wisalAptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connec…6.5 Medium
- totolink cp900, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.9.8 Critical
- i-plug inc. 'offerbox' app for android, 'offerbox' app for ios, iplug offerbox app for android +1 more +3 more'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to...7.5 High
- trellix epolicy orchestratorHardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5...7.5 High
- cyberpower powerpanel, powerpanel business +1 moreCyberPower PowerPanel business Use of Hard-coded Credentials9.8 Critical
- ge healthcare echopac software only, echopac turnkey, imagevault +2 more +4 moreWeak account password in GE HealthCare EchoPAC products9.6 Critical
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device...9.8 Critical
- totolink ex200, ex200 firmware +1 moreTOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at ...9.8 Critical
- sangoma freepbx linux 7Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST...8.6 High
- totolink cp450 firmwareTOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the...8.6 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability8.6 High
- d-link dcs-8300lhv2, dlink dcs-8300lhv2 firmware +1 moreD-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability6.3 Medium
- voltronic power viewpower pro, voltronicpower viewpower +1 moreVoltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability7.8 High
- d-link d-view, dlink d-view 8 +1 moreD-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability9.8 Critical
- softing secure integration server, edgeaggregator, edgeconnector +2 moreSofting Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability4.9 Medium
- triangle microworks scada data gatewayTriangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability5.3 Medium
- d-link dap-2622, dlink dap-2622 firmware, dap 2622 firmware +2 moreD-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability8.8 High
- netgear rax30, rax30 firmware +1 moreNETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability6.3 Medium
- d-link dap-1360, dlink dap-1360 firmware, dap-2020 firmware +2 moreD-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability8.8 High
- kemptechnologies loadmasterLoadMaster Hardcoded SSH Key7.5 High
- kde libksieveIn KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server...7.1 High
- tormach pathpilot controller, pilotpath controller +1 moreAn issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite...4.4 Medium
- broadcom brocade sannav, brocade sannav +1 morehard-coded credentials in the documentation that appear as the appliance root password7.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav contains hardcoded TLS keys used by Docker1.9 Low
- broadcom brocade sannav, brocade sannav +1 moreIdentical SSH keys utilized inside the OVA image (CVE-2024-29960)6.8 Medium
- netapp ontap select deploy administration utility, clustered data ontap +1 moreDefault Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility5.4 Medium
- peplink smart reader, smart reader firmware +1 moreA privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart...6.8 Medium
- ibm security verify access appliance, security verify access +1 moreIBM Security Verify Access Appliance information disclosure7.5 High
- microsoft azure ai searchAzure AI Search Information Disclosure Vulnerability7.3 High
- d-link dns-320l, dns-325, dns-327l +22 more +24 moreD-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials9.8 Critical
- coolkit ewelink appInsecure Data Storage leading to sensitive Information disclosure.5.7 Medium
- kiloview ndi, ndi n4 firmware +1 moreUse of Hard-coded Credentials in Kiloview NDI N series products API middleware9.8 Critical
- elspec-ltd g5dfr firmwareAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A...6.5 Medium
- chirp systems accessChirp Systems Chirp Access Use of Hard-coded Password2.3 Low
- unitronics unilogic, unistream unilogic +1 moreUnitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-259: Use of Hard-coded Password7.5 High
- opentext™ exceed turbo x, opentext exceed turbox +1 moreUse of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions...4.7 Medium
- Show moreLoading…