CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- sharp corporation multiple mfps (multifunction printers)API keys for some cloud services are hardcoded in the "main" binary. As for the details of...9.1 Critical
- sharp corporation multiple mfps (multifunction printers)There are several hidden accounts. Some of them are intended for maintenance engineers, and with...9.1 Critical
- red hat build of keycloak 24, build of keycloak 24.0.9, build of keycloak 26.0 +3 more +5 moreOrg.keycloak:keycloak-quarkus-server: sensitive data exposure in keycloak build process5.9 Medium
- e-lins h685, h685f, h700 +6 more +8 moreE-Lins H685/H685f/H700/H720/H750/H820/H820Q/H820Q0/H900 OEM Backend hard-coded credentials6.9 Medium
- logsign unified secops platform, unified secops +1 moreLogsign Unified SecOps Platform HTTP API Hard-coded Cryptographic Key Remote Code Execution Vulnerability8.8 High
- allegraAllegra Hard-coded Credentials Authentication Bypass Vulnerability9.8 Critical
- versa director, versa-networks versa director +1 moreThe Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is...10.0 Critical
- tenda w30e firmwareTenda W30E v2.0 V16.01.0.8 was discovered to contain a hardcoded password vulnerability in ...8.0 High
- tenda w9 firmwareTenda W9 v1.0.0.7(4456) was discovered to contain a hardcoded password vulnerability in /etc_ro...8.0 High
- microsoft azure stack hci, azure stack hci os +1 moreAzure Stack HCI Elevation of Privilege Vulnerability8.8 High
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreClinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator9.3 Critical
- dataeaseDataEase has a forged JWT token vulnerability9.3 Critical
- progress telerik report serverHard-coded credentials used for temporary and cache data encryption7.1 High
- cybelesoft thinfinity workspaceCybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded...4.8 Medium
- free-now freenow, intelligent apps freenow app +1 moreIntelligent Apps Freenow App Keystore SSL.java hard-coded password6.3 Medium
- hasomed elefantHardcoded Service Password7.8 High
- mariazevedo88 travels-java-apimariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key2.3 Low
- cosmote greece what's up app, cosmote what\'s up, cosmotegreece whatsup app +2 moreCosmote Greece What's Up App Realm Database RealmDB.java default key2.0 Low
- lb-link bl-wr1300h firmwareLB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily...9.8 Critical
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows...8.1 High
- levelone wbr-6012, level1 wbr-6012 firmware +1 moreA security flaw involving hard-coded credentials in LevelOne WBR-6012's web services allows...8.1 High
- ibm flexible service processor, ess 5000 \(5105-22e\) firmware, power system e1080 \(9080-hex\) firmware +26 more +28 moreIBM Flexible Service Processor hard coded credentials9.8 Critical
- netdvr neye3cNeye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update...9.8 Critical
- cisco firepower threat defense software, secure firewall threat defense +1 moreA vulnerability in Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000, 2100,...9.3 Critical
- sonatype nexus repository, nexus repository manager +1 moreNexus Repository 3 - Static hard-coded encryption passphrase used by default5.9 Medium
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Use of Hard-coded Credentials5.3 Medium
- sick ag clv6xx, lector6xx, rfx6xx +1 more +3 moreVulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx9.1 Critical
- tenda g3 firmwareTenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in ...8.0 High
- cisco ucs central software, unified computing system central software +1 moreCisco UCS Central Software Configuration Backup Static Key Vulnerability6.3 Medium
- kubernetes image builderVM images built with Image Builder with some providers use default credentials during builds6.3 Medium
- kubernetes image builderVM images built with Image Builder and Proxmox provider use default credentials9.8 Critical
- helmholz rex100, rex 100 firmware, mb connect line mbnet.mini +1 more +3 moreMB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords9.8 Critical
- ewelink zigbee bridge proFirmware extraction and Hardware SSL Pinning Bypass7.0 High
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, planet technology gs-4210-24p2s hardware 3.0 +1 more +3 morePLANET Technology switch devices - Hard-coded SNMPv1 read-write community string8.6 High
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, planet technology gs-4210-24p2s hardware 3.0 +2 more +4 morePLANET Technology switch devices - Local users' passwords recovery through hard-coded credentials6.8 Medium
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, planet technology gs-4210-24p2s hardware 3.0 +2 more +4 morePLANET Technology switch devices - Remote privilege escalation using hard-coded credentials8.8 High
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local...8.8 High
- infinera hit 7300, nokia hit 7300 firmware +1 moreAn issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in...8.8 High
- autel maxicharger ac elite business c50, maxicharger ac elite business c50 eu firmware, maxicharger ac elite business c50 firmware +2 moreAutel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability6.5 Medium
- dover fueling solutions (dfs) progauge maglink lx console, progauge maglink lx4 console, doverfuelingsolutions maglink lx4 console +3 more +5 moreDover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded Password9.3 Critical
- kastle systems access control system, kastle access control system firmware +1 moreUse of Hard-coded Credentials in Kastle Systems Access Control System9.2 Critical
- dragonflyoss dragonfly2, linuxfoundation dragonfly +1 moreDragonfly2 vulnerable to hard coded cyptographic key9.8 Critical
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat...8.8 High
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.6.5 Medium
- govicture pc420 firmwareVicture PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in...8.8 High
- d-link dir-x4860 a1, dlink dir-4860 a1, dir-x4860 firmware +2 moreD-Link WiFi router - OS Command Injection9.8 Critical
- tnb mobile solutions cockpit software, tnbmobil cockpit +1 moreHardcoded Credentals in TNB Mobile Solutions' Cockpit Software8.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability6.3 Medium
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A...2.3 Low
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an...7.9 High
- Show moreLoading…