CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- openc3 cosmosOpenC3 COSMOS v6.0.0 was discovered to contain hardcoded credentials for the Service Account.9.8 Critical
- gfi archiverHard-coded ArchiverSpaApi JWT Signing Key8.1 High
- wolfbox level 2 ev charger, level 2 ev charger firmware +1 moreWOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability4.6 Medium
- b. braun melsungen ag onlinesuiteUse of Hard-coded Credentials in OnlineSuite9.4 Critical
- nucom nc-wr744gNuCom NC-WR744G Console Application hard-coded credentials5.3 Medium
- jct airpointerDefault Credentials6.5 Medium
- aryan6673 project-aiProject AI API Key Exposure in Source Code2.7 Low
- consilium safety cs5000 fire panelConsilium Safety CS5000 Fire Panel Use of Hard-coded Credentials9.3 Critical
- netwrix directory managerNetwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded...10.0 Critical
- dell powerstore, powerstoreos +1 moreDell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in...6.5 Medium
- perfree perfreeblogPerfreeBlog JWT JwtUtil hard-coded key6.3 Medium
- intellian technologies iridium certus 700Injection vulnerability in Iridium Certus 7006.1 Medium
- ecovacs mobile and android applicationDisclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications4.7 Medium
- echarge hardy barth cph2 / cpp2 charging stationsHard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations6.5 Medium
- echarge hardy barth cph2 / cpp2 charging stationsHard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations7.7 High
- connectwise risk assessmentHardcoded Key Revealed in ConnectWise Password Encryption Utility6.0 Medium
- microsoft windows hardware lab kit, windows 10 hlk version 20h2, windows 10 hlk version 21h1 +9 more +11 moreMicrosoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability6.7 Medium
- zkteco zkbio cvsecurityIn ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the...6.5 Medium
- smarsh telemessage, telemessage archiving backend +1 moreThe TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an...4.8 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE...10.0 Critical
- optigo networks ons nc600Use of Hard-coded Credentials Optigo Networks ONS NC6009.3 Critical
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5. The...7.3 High
- gotenna, gotenna mesh firmware +1 moreAn issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12. The...7.3 High
- ribbon communications apollo 9608Ribbon Communications - CWE-798: Use of Hard-coded Credentials5.5 Medium
- bowo admin and site enhancements (ase), wpase admin and site enhancements +1 moreAdmin and Site Enhancements (ASE) < 7.6.10 - Password Protection Bypass5.3 Medium
- quantum stornextQuantum StorNext Web GUI API before 7.2.4 grants access to internal StorNext configuration and...7.2 High
- netscout ngeniusoneNETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR...9.8 Critical
- planet technology uni-nms-litePlanet Technology Network Products Use of Hard-coded Credentials9.3 Critical
- planet technology uni-nms-litePlanet Technology Network Products Use of Hard-coded Credentials9.3 Critical
- carlinkit cpc200-ccpa, autokit +1 moreCarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability7.6 High
- jmbroadcast jmb0150 firmwareIncorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access...9.1 Critical
- siemens sentron 7kt pac1260 data manager, 7kt pac1260 data manager firmware +1 moreA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). Affected...10.0 Critical
- philips advanced visualization workspace, intellispace portal +1 moreUse of default hardcoded credentials7.2 High
- gladinet centrestackGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization...9.0 Critical
- No product listedAn issue was discovered on the Audi Universal Traffic Recorder 2.88. It has Susceptibility to...7.5 High
- esri portal for arcgisBUG-0001743369.8 Critical
- audi utr dashcamAudi UTR Dashcam Video Stream hard-coded credentials5.3 Medium
- No product listedAn issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for...9.8 Critical
- No product listedAn issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded...9.8 Critical
- No product listedAn issue was discovered on ROADCAM X3 devices. It has a uniform default credential set that...9.8 Critical
- hella dr 820 firmwareAn issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Hardcoded Credentials...9.8 Critical
- No product listedIn the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092. The...6.5 Medium
- fortinet fortisiemA use of hard-coded cryptographic key vulnerability in FortiSIEM version 5.2.6 may allow a remote...3.6 Low
- fortinet fortiwlcA use of hard-coded password vulnerability in FortiWLC version 8.5.2 and below, version 8.4.8 and...6.5 Medium
- zohocorp analytics plusAccount Takeover7.4 High
- iroad dash cam x5, dash cam x6 +1 moreIROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials7.7 High
- iroad x5 mobile appIROAD X5 Mobile App API Endpoint hard-coded credentials6.9 Medium
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials6.9 Medium
- uxper civi, civi - job board & freelance marketplace wordpress theme +1 moreCivi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure7.3 High
- ge vernova enervista ur setupUse of Hard-coded Credentials vulnerability in GE Vernova EnerVista UR Setup allows Privilege...8.0 High
- Show moreLoading…