CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- cisco smart licensing utility, smart license utility +1 moreA vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker...9.8 Critical
- ibm maas360, maas360 mdm +1 moreIBM MaaS360 information disclosure4.6 Medium
- fortra filecatalyst workflowInsecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)9.8 Critical
- totolink t10 ac1200, t10 firmware, t10 v2 firmware +2 moreTOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials9.3 Critical
- go-tribe gotribeGo-Tribe gotribe token.go Sign hard-coded credentials5.3 Medium
- uci idol2An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between...5.3 Medium
- solarwinds web help desk, webhelpdesk +1 moreSolarWinds Web Help Desk Hardcoded Credential Vulnerability9.1 Critical
- demozx gf cmsdemozx gf_cms JWT Authentication auth.go init hard-coded credentials6.9 Medium
- h3c magic b1st firmwareH3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- h3c r3010 firmwareH3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow...9.8 Critical
- gncchome gncc c2 firmwareIdentical Hardcoded Root Password for All Devices in GNCC's GC2 Indoor Security Camera 1080P...6.8 Medium
- amd radeon™ pro w6000 series graphics cards, radeon™ rx 6000 series graphics cards +1 moreA hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key,...1.9 Low
- vonets vap11ac, vap11ac firmware, vap11g +25 more +27 moreVonets WiFi Bridges Use of Hard-coded Credentials8.7 High
- journyx, journyx (jtime) +1 moreJournyx Unauthenticated Password Reset Bruteforce8.8 High
- dlink dir-300 firmwareD-Link DIR-300 REVA FIRMWARE v1.06B05_WW contains hardcoded credentials in the Telnet service.9.8 Critical
- zexelon zwx-2000csw2-hn firmware, zexelon co., ltd. zwx-2000csw2-hn +1 moreZWX-2000CSW2-HN firmware versions prior to Ver.0.3.15 uses hard-coded credentials, which may...8.8 High
- hms-networks ewon cosy\+ firmwareCosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique...6.6 Medium
- totolink cp450, cp450 firmware +1 moreTOTOLINK CP450 Telnet Service product.ini hard-coded password9.3 Critical
- dlink dir-860l firmwareIn D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04, the Telnet service contains hardcoded...9.8 Critical
- dlink dir-820lw firmwareD-Link DIR-820LW REVB FIRMWARE PATCH 2.03.B01_TC contains hardcoded credentials in the Telnet...9.8 Critical
- totolink a3000ru, a3000ru firmware +1 moreTOTOLINK A3000RU product.ini hard-coded password5.1 Medium
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R shadow.sample hard-coded password2.0 Low
- syrotech sy-gpon-1110-wdont router, sy-gpon-1110-wdont firmware +1 moreHard-coded Credentials Vulnerability5.2 Medium
- perkinelmer processplus, perkin elmer process plus +1 moreHardcoded MSSQL Credentials9.3 Critical
- manageengine ddi central, zohocorp manageengine ddi central +1 moreAgent takeover8.8 High
- tendacn i29 firmwareTenda i29V1.0 V1.0.0.5 was discovered to contain a hardcoded password for root.9.8 Critical
- wp2speed, wp2speed faster – optimize pagespeed insights score 90-100 +1 moreWP2Speed Faster – Optimize PageSpeed Insights Score 90-100 <= 1.0.1 - Improper Authorization due to use of Hardcoded Credentials5.3 Medium
- ifm smart plc ac14xx firmware, smart plc ac4xxs firmware +1 moreifm: Hardcoded telnet credentials in Smart PLC9.1 Critical
- ifm smart plc ac14xx firmware, smart plc ac4xxs firmware +1 moreifm: Use of Hard-coded Credentials9.8 Critical
- levelone wbr-6013, level1 wbr-6013 firmware, level one wbr6013 +1 more +3 moreA hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013...9.8 Critical
- myscada mypromySCADA myPRO Use of Hard-coded Password9.3 Critical
- kiloview p1/p2, p1 4g video encoder firmware, p1 firmware +2 more +4 moreUse of Hard-coded Credentials in Kiloview P1/P2 devices9.8 Critical
- kakao piccoma corp. "piccoma" app for android, "piccoma" app for ios +1 more"Piccoma" App for Android and iOS versions prior to 6.20.0 uses a hard-coded API key for an...4.0 Medium
- markoni markoni-d (compact) fm transmitters, markoni-d \(compact\) firmware, markoni-d fm transmitter +3 more +5 moreUse of Hard-coded Credentials in TELSAT marKoni FM Transmitter9.3 Critical
- talya informatics elektrawebImproper Access Control in Talya Informatics' Elektraweb9.8 Critical
- luciapplucky luci-app-luckyluci-app-lucky v2.8.3 was discovered to contain hardcoded credentials.9.8 Critical
- lumis experience platformA hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass...7.5 High
- brocade fabric os, broadcom fabric operating system +1 moreBrocade Fabric OS versions prior to v9.0 have default community strings8.1 High
- baicells snap router, ep3011 firmware +1 moreHard Coded Credential9.3 Critical
- faronics winselect, winselect (standard + enterprise) +1 moreHardcoded Credentials7.5 High
- cve-2024-36480 ricoh streamline nx pc client, ricoh streamline nx pc client +1 moreUse of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier...9.8 Critical
- d-link e15, e30, g403 +15 more +17 moreD-Link router - Hidden Backdoor8.8 High
- guoxinled synthesis image systemShenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.9.8 Critical
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreHardcoded credentials for WebDAV access7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Hardcoded keys used to generate authentication cookies7.1 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded password used to encrypt files6.2 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreHardcoded password used to encrypt logs and use of weak cipher6.2 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp)Hardcoded password used to encrypt logs6.2 Medium
- motorola solutions vigilant fixed lpr coms box (bcav1f2-c600), motorola vigilant fixed lpr coms box firmware +1 moreUse of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)8.6 High
- dlink dir-605l firmwareD-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc...8.8 High
- Show moreLoading…