CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- weidmueller procon-winWeidmueller: Authentication Vulnerability due to Hard-coded Credentials9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368...9.8 Critical
- i-drive i11, i12, i11 firmware +1 more +3 morei-Drive i11/i12 APK hard-coded credentials2.4 Low
- e-kent pallium vehicle trackingInformation Disclosure in E-Kent's Pallium Vehicle Tracking8.2 High
- No product listedVue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded...9.8 Critical
- tp-link tl-wr845n firmwareTL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded...9.8 Critical
- sungrowpower isolarcloudSunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials....9.8 Critical
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure8.8 High
- goodwe technologies co., ltd. gw1500‑xsUse of Hard-coded Credentials vulnerability in GoodWe Technologies Co., Ltd. GW1500‑XS allows...7.3 High
- No product listedIXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root...5.4 Medium
- wattsense bridgeWeak Hard-coded Credentials9.8 Critical
- solarwinds web help deskSolarWinds Web Help Desk Cryptographic Key Management Vulnerability5.5 Medium
- billion electric m120n, m100, m150 +1 more +3 moreBillion Electric M120N - Use of Hard-coded Credentials8.4 High
- tenda w18e firmwareHardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to...8.3 High
- tenda w18e firmwareA default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote...8.8 High
- tenda w18e firmwareA hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated...8.8 High
- abb aspect-enterprise, matrix series, nexus series +19 more +21 moreCredentials Disclosure - keys9.3 Critical
- No product listedForever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever...9.1 Critical
- four-faith f3x36, f3x36 firmware +1 moreFour-Faith F3x36 Hidden Debug Credentials9.8 Critical
- easyvirt co2scope, dcscope +1 moreIn EasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0, the AES encryption keys used to encrypt...7.5 High
- easyvirt co2scope, dcscope +1 moreEasyVirt DCScope <=8.6.0 and CO2Scope <=1.3.0 are vulnerable to privilege escalation as the...9.8 Critical
- No product listedAn issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service,...8.8 High
- No product listedAutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the...7.5 High
- sungrowpower winet-s firmwareSunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that...5.4 Medium
- sungrowpower winet-s firmwareSunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be...6.5 Medium
- xerox workplace suiteFlawed token generation implementation & Hard-coded key implementation7.6 High
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums deterministic root password7.0 High
- ossur mobile logic applicationOssur Mobile Logic Application Use of Hard-coded Credentials2.0 Low
- No product listedHI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to...9.8 Critical
- No product listedAn issue in the AsDB service of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to enumerate...7.5 High
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all...3.2 Low
- fortinet fortiswitchA use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2...9.6 Critical
- No product listedIn Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH. The root password is hardcoded in the firmware. NOTE: This vulnerability appea…9.1 Critical
- No product listedInfoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client...9.1 Critical
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure6.5 Medium
- qnap qts, quts hero, qutscloud +2 moreQTS, QuTS hero, QuTScloud6.8 Medium
- asseco business solutions s.a. wapro erp desktopHardcoded Password in Wapro ERP Desktop9.3 Critical
- No product listedui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric...9.8 Critical
- dell recoverpoint for virtual machinesDell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability...5.3 Medium
- image access gmbh scan2netHardcoded credentials8.4 High
- ui u6-lr firmwareUbiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow...9.8 Critical
- No product listedUbiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc...7.5 High
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions...6.3 Medium
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreDefault Credentials9.3 Critical
- No product listedA hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive...6.5 Medium
- ibm cognos controllerIBM Cognos Controller hard coded credentials7.5 High
- ever traduoraEver Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard...8.8 High
- ibm security verify accessIBM Security Verify Access Appliance hard coded credentials9.4 Critical
- ibm security verify accessIBM Security Verify Access Appliance hard coded credentials9.4 Critical
- advantech eki-6333ac-1gpo, eki-6333ac-2g, eki-6333ac-2gd +3 more +5 moreA CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices...6.5 Medium
- Show moreLoading…