CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- tenda ac20, ac20 firmware +1 moreTenda AC20 shadow hard-coded credentials2.0 Low
- linlinjava litemalllinlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials6.3 Medium
- zkteco co wl20 biometric attendance systemHard-coded Private Key Vulnerability in ZKTeco WL206.9 Medium
- zkteco co wl20 biometric attendance systemHard-coded Credentials Vulnerability in ZKTeco WL206.8 Medium
- No product listedShenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices enable the SSH service by...9.8 Critical
- checkpoint harmony sase, check point harmony sase +1 moreExposed SFTP server8.1 High
- solarwinds database performance analyzerSolarWinds Database Performance Analyzer Hard-coded Cryptographic Key Vulnerability5.6 Medium
- belkin f9k1009, f9k1010 +1 moreBelkin F9K1009/F9K1010 Web Interface hard-coded credentials9.3 Critical
- tigo energy cloud connect advancedUse of Hard-coded Credentials in Tigo Energy Cloud Connect Advanced9.3 Critical
- vessel9817 onion-site-templateonion-site-template tor Secrets Baked Into Image8.7 High
- eladminelunez eladmin Druid application-prod.yml default credentials6.9 Medium
- dell ecs, objectscale, elastic cloud storage +2 moreDell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0, contain a Use of Hard-coded...8.4 High
- dell enterprise sonic osDell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An...7.5 High
- craws openatlasAustrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded...9.8 Critical
- No product listedCertain Draytek products are affected by Insecure Permissions. This affects AP903 v1.4.18 and...8.6 High
- hewlett packard enterprise hpe telco network function virtual orchestratorHard-Coded Encryption Keys found in System6.0 Medium
- hewlett packard enterprise hpe telco network function virtual orchestratorHard-Coded Authentication Keys found in System6.0 Medium
- array networks vapv, vxag +1 moreArray Networks vAPV and vxAG Default Credential Privilege Escalation10.0 Critical
- No product listedAn issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with...9.8 Critical
- d-link dir-890l, dlink dir-890l firmware +1 moreD-Link DIR-890L UART Port rgbin hard-coded credentials7.0 High
- artica st pandora fms, pandora fms fms +1 morePandora FMS ≤ 5.0 SP2 Default Credential SQL Injection RCE10.0 Critical
- unitree go1 firmwareUnitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication...8.8 High
- hcl software iautomate, hcltech dryice iautomate +1 moreHCL iAutomate is affected by hardcoded credentials7.1 High
- samsung magicinfo 9 serverUse of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows...9.1 Critical
- samsung magicinfo 9 serverUse of Hard-coded Credentials vulnerability in Samsung Electronics MagicINFO 9 Server allows...9.1 Critical
- pavo inc. payHardcoded Credentials in PAVO Inc.'s PAVO Pay7.5 High
- asus myasusAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized...6.9 Medium
- asus myasusAn insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized...7.7 High
- signum-net faraHardcoded SQLite password in FARA8.6 High
- tp-link system inc. archer c50 v3, archer c50 v4, archer c50 v5 +1 more +3 moreHardcoded DES Decryption Keys in TP-Link Archer C50 V3/V4/V5 and C20 V56.9 Medium
- digisol xpon onu wi-fi router (dg-gr6821ac)Hard-coded Credentials Vulnerability in Digisol DG-GR6821AC Router5.1 Medium
- zexelon co., ltd. zwx-2000cs2-hn, zwx-2000csw2-hn +1 moreUse of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN...6.8 Medium
- protns actadurRemote Code Execution in ProTNS ActADUR9.4 Critical
- No product listedAn authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions...9.8 Critical
- lb-link bl-ac3600, bl-ac3600 firmware +1 moreLB-LINK BL-AC3600 shadow hard-coded credentials8.5 High
- tenda cp3 pro firmwareTenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file...6.8 Medium
- ivanti dsm, desktop \& server management +1 moreA hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent...9.0 Critical
- shenzhen liandian communication technology ltd v380 ip camera / appfhe1 v1.0.6.0An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet...10.0 Critical
- aa-team premium age verification / restriction for wordpressPremium Age Verification / Restriction for WordPress <= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote_tunnel.php9.8 Critical
- mitsubishi electric corporation pv-dr004j, pv-dr004ja +1 moreUse of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic...7.1 High
- adobe coldfusionColdFusion | Use of Hard-coded Credentials (CWE-798)8.8 High
- hewlett packard enterprise (hpe) hpe networking instant onHardcoded Credential Exposure Allows Unauthorized Access in Web Interface9.8 Critical
- No product listedA vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6. The...7.5 High
- mao888 bluebell-plusmao888 bluebell-plus JWT Token jwt.go hard-coded password6.3 Medium
- cisco unified communications managerCisco Unified Communications Manager Static SSH Credentials Vulnerability10.0 Critical
- enensys ipguardv2 firmwareENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.9.8 Critical
- ataturk university ata-aof mobile applicationHardcoded Credentials in Ataturk University's ATA-AOF Mobile Application10.0 Critical
- 5vtechnologies blue angel software suite5VTechnologies Blue Angel Software Suite Hardcoded Credentials9.3 Critical
- dlink dph-400s firmware, dph-400se firmware +1 moreD-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including...9.8 Critical
- sitecore experience manager, experience platform, experience commerce +1 more +3 moreSitecore XM and XP Hardcoded Credentials7.5 High
- Show moreLoading…