CWE-798: Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- janitza umg 96rm-e 230v(5222062), umg 96rm-e 24v(5222063), weidmueller energy meter 750-230 (2540910000) +1 more +3 moreUse of Hard-coded Credentials in power analyzer6.5 Medium
- keygraphhq shannonKeygraph Shannon Hard-coded Router API Key6.9 Medium
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreIDC SFX2100 Satellite Receiver bgpd/ospfd/ripd/zebra Config Credential Disclosure via World-Readable Files8.6 High
- datacast sfx2100 firmware, international datacasting corporation idc sfx2100 superflex satellite receiver +1 moreInsecure, Hardcoded Root Password Stored in Anaconda Configuration File On IDC SFX2100 Satellite Receiver9.2 Critical
- datacast sfx2100 firmware, international datacasting corporation (idc) sfx2100 series superflex satellitereceiver +1 moreHardcoded and Insecure Credentials for "Admin" Account providing Telnet Access on IDC SFX2100 Satellite Receiver8.8 High
- datacast sfx2100 firmware, international datacasting corporation idc sfx2100 superflex satellite receiver +1 moreHardcoded FTP Credentials and LPE(via Insecure Permissions) for `xd` Local Account on IDC SFX21007.9 High
- international datacasting corporation sfx2100 satellite receiver, datacast sfx2100 firmware +1 moreHardcoded and Insecure Credentials for "User" Local Account with SSH Access On IDC SFX2100 Satellite Receiver9.2 Critical
- datacast sfx2100 firmware, international datacasting corporation idc sfx2100 superflex satellite receiver +1 moreHardcoded and Insecure Credentials for "monitor" account with SSH Access On IDC SFX2100 Satellite Receiver7.8 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty could provide weaker than expected security4.7 Medium
- weintek easyweb, cmt-3072xh2 firmware +1 moreWeintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to stroe credentials in...7.5 High
- weintek easyweb, cmt-3072xh2 firmware +1 moreWeintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded...5.3 Medium
- weintek easyweb, cmt-3072xh2 firmware +1 moreWeintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain a hardcoded password...7.5 High
- gradio-app gradioGradio: Mocked OAuth Login Exposes Server Credentials and Uses Hardcoded Session Secret0.0 None
- gardyn home kit, home kit cloud api, home kit mobile application +2 moreAdministrative Credentials Can Be Extracted Through Gardyn API Responses9.3 Critical
- finka finka-faktura, finka-fk, finka-kpr +4 more +6 moreHard-coded database credentials in Finka software8.6 High
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Hard-coded Credentials9.3 Critical
- mlflow, red hat openshift ai (rhoai) +1 moreMLflow Use of Default Password Authentication Bypass Vulnerability9.8 Critical
- beetel 777vr1Beetel 777VR1 WPA2 PSK hard-coded credentials2.3 Low
- commscope ruckus network directorIn Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for...9.8 Critical
- dell recoverpoint for virtual machines, recoverpoint for virtual machines (rp4vms) +1 moreDell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded...10.0 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software.6.5 Medium
- glory global solutions rbg-100Glory RBG-100 Recycler System Hard-coded OS Credentials9.3 Critical
- beetel 777vr1, 777vr1 firmware +1 moreBeetel 777VR1 Web Management hard-coded credentials8.7 High
- calero verasmartCalero VeraSMART < 2026 R1 Hardcoded Static AES Keys Allow Decryption of Service Credentials8.5 High
- heatmiser netmonitorHeatmiser Netmonitor 3.03 - Hardcoded Credentials9.3 Critical
- newbee-ltd newbee-mallnewbee-mall Default Seeded Administrator Credentials Allow Account Takeover9.3 Critical
- amss++AMSS++ 4.7 - Backdoor Admin Account9.3 Critical
- denpiligrim 3dp-manager3DP-MANAGER Uses Hard-coded Credentials9.8 Critical
- infor syteline erpUse of Hard-Coded Cryptographic Key for Password Storage7.1 High
- cisco prime infrastructureCisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability4.8 Medium
- netis systems co., ltd. e1+Netis E1+ 1.2.32533 - Backdoor Account (root)9.3 Critical
- frangoteam fuxaDuplicate Advisory: FUXA contains a hard-coded credential vulnerability9.8 Critical
- samsung magicinfo 9 serverThe database account and password are hardcoded, allowing login with the account to manipulate...9.8 Critical
- tenda ax12 pro v2, ax12 pro firmware +1 moreTenda AX12 Pro V2 Telnet Service hard-coded credentials9.2 Critical
- solarwinds web help deskSolarWinds Web Help Desk Hardcoded Credentials Vulnerability7.5 High
- dokployDokploy uses hardcoded credentials in installation script, which could result in database access8.0 High
- ezcast pro ii, nimbletech ezcast pro dongle ii firmware +1 moreUse of well-known default credentials in EZCast Pro II Dongle7.6 High
- dormakaba access manager 92xx-k5Static Firmware Encryption Password in dormakaba access manager8.5 High
- dormakaba kaba exos 9300Weak Default Password in dormakaba Kaba exos 93004.6 Medium
- dormakaba kaba exos 9300Hard-coded Key for PIN Encryption in dormakaba Kaba exos 93006.8 Medium
- dormakaba kaba exos 9300Unauthenticated RPC Service in dormakaba Kaba exos 93008.7 High
- dormakaba kaba exos 9300Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 93009.3 Critical
- milner imagedirector captureHard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture6.9 Medium
- newplane open5gsOpen 5GS WebUI uses a hard-coded JWT signing key6.5 Medium
- ibm sterling connect:direct for unix containerIBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.8.4 High
- browan communications prismx mx100 ap controllerBROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Use of Hard-coded Credentials9.3 Critical
- denver sho-110Denver SHO-110 IP Camera Unauthenticated Snapshot Access8.7 High
- sick tdc-x401gl firmware, sick ag tdc-x401gl +1 moreFirmware update files may expose password hashes for system accounts, which could allow a remote...5.3 Medium
- cobbr covenantCovenant 0.5 - Remote Code Execution (RCE)9.3 Critical
- ruckus networks vriot iot controllerRuckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE10.0 Critical
- Show moreLoading…