CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- ruckus networks vriot iot controllerRuckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE10.0 Critical
- kaon cg3000t, cg3000tc +1 moreHardcoded credentials in KAON CG3000T/CG3000CT routers9.3 Critical
- inim electronics s.r.l. smartliving smartlan/g/siINIM Electronics Smartliving SmartLAN/G/SI <=6.x Hard-coded Credentials Vulnerability9.3 Critical
- flir systems, inc. thermal camera f/fc/pt/dFLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 Hard-Coded SSH Credentials Vulnerability9.3 Critical
- adtecdigital signedje digital signage player, admanage traffic & media management application, afiniti multi-carrier platform +8 more +10 moreAdtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials8.7 High
- cypress oneCypress Solutions CTM-200/CTM-ONE 1.3.6 Hard-coded Credentials Remote Root9.3 Critical
- tenda 4g03 pro, 4g05, 4g08 +4 more +6 moreTenda i24 Shadow File hard-coded credentials8.5 High
- ksenia security s.p.a. lares, kseniasecurity lares firmware +1 moreKsenia Security lares Home Automation 1.6 Default Credentials Vulnerability9.3 Critical
- ateme anevia flamingo xl/xs, flamingo xl firmware, flamingo xs firmware +2 more +4 moreAnevia Flamingo XL/XS 3.6.20 Default Credentials Authentication Bypass9.3 Critical
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco <=2.x Hardcoded Credentials Authentication Bypass9.3 Critical
- rustfsRustFS has a gRPC Hardcoded Token Authentication Bypass9.8 Critical
- actionsky sqleactiontech sqle JWT Secret jwt.go hard-coded key6.3 Medium
- getmaxun maxungetmaxun auth.ts hard-coded key6.3 Medium
- b3log siyuanSiYuan: Information Disclosure and Authentication Bypass via Hardcoded Session Secret6.9 Medium
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Remote SSH Root Access9.8 Critical
- flir systems ax8 thermal camera, flir ax8 firmware +1 moreFLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication Bypass9.3 Critical
- nvidia isaac launchableNVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded...9.8 Critical
- oxygenz clipbucketClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or...9.8 Critical
- utarit soliclubUse of Hard-coded Credentials in Utarit Informatics' SoliClub7.5 High
- utarit soliclubHardcoded Credentials in Utarit Informatics' SoliClub7.5 High
- langgenius difyDefault credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker...9.8 Critical
- radiometer medical aps abl800 basic and abl800 flex analyzers, abl90 flex and abl90 flex plus analyzers, aqt90 flex analyzers +2 moreCredential Disclosure vulnerability in Radiometer Products8.4 High
- netun helpflash iot firmwareThe OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware...6.6 Medium
- zimbra collaborationAn issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1. A hardcoded Flickr API key...4.7 Medium
- growatt shinelan-x, shine lan-x firmware +1 moreUndocumented backup Account and No Password Configuration Capability9.4 Critical
- growatt shinelan-x, shine lan-x firmware +1 moreHardcoded FTP Credentials within the firmware9.4 Critical
- gladinet centrestack, centrestack and triofox, triofox +2 moreGladinet CentreStack and TrioFox Hard Coded AES Keys7.1 High
- apache streamparkApache StreamPark: Use hard-coded key vulnerability9.8 Critical
- ezcast pro iiHard-coded cryptographic keys in EZCast Pro II Dongle9.3 Critical
- meatmeet pro wifi \& bluetooth meat thermometer firmwareThe Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for...9.8 Critical
- selea targa ip ocr-anpr camera, carplateserver, izero box full firmware +10 more +12 moreSelea Targa IP Camera Cross-Site Request Forgery via Admin Creation8.5 High
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V4.0.1). The affected...9.2 Critical
- phoenix contact fl nat 2008, fl nat 2208, fl nat 2304-2gc-2sfp +134 more +136 moreHardcoded User Password4.6 Medium
- tozed zlt m30s, zlt m30s pro +1 moreTOZED ZLT M30S/ZLT M30S PRO Web hard-coded credentials8.7 High
- pommee goawayAuthentication Bypass via Hardcoded Credentials GoAway up to v0.62.18, fixed in 0.62.19, uses a...8.8 High
- sunbird dcim dctrack, power iq +1 moreSunbird DCIM dcTrack and Power IQ Use of Hard-coded Credentials8.4 High
- allnet all-rut22gw firmwareALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library.9.8 Critical
- mirion medical ec2 software nmis biodose, mirion biodose\/nmis +1 moreMirion Medical EC2 Software NMIS BioDose Use of Hard-coded Credentials8.4 High
- arcadeai arcade-mcpArcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints6.5 Medium
- shenzhen tvt digital technology co., ltd. nvms-9000TVT NVMS-9000 Hard-coded API Credentials & Command Injection9.3 Critical
- xtooltech xtool anyscanXtooltech Xtool AnyScan Android Application 4.40.40 and prior uses a hardcoded cryptographic key...4.6 Medium
- desktopalert pingalert application serverA vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11...5.3 Medium
- fortinet fortiwebA use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all...4.8 Medium
- nixos nixpkgsNixOS has hardcoded credentials in Onlyoffice module5.3 Medium
- shsuishang shopsuite modulithshopshsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials6.9 Medium
- astrbotAstrBot is vulnerable to RCE with hard-coded JWT signing keys7.3 High
- nvidia authn component of nvidia aistoreNVIDIA AIStore contains a vulnerability in AuthN. A successful exploit of this vulnerability...8.8 High
- sap se sql anywhere monitor (non-gui)Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui)10.0 Critical
- light & wonder, inc. / shfl entertainment, inc. / shuffle master, inc. deck mate 2Shuffle Master Deck Mate 2 Hard-coded Credentials & Exposed Services7.0 High
- planex communications inc. mzk-dp300nUse of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may...8.7 High
- Show moreLoading…