# CWE-1392. Every Advisory and CVE whose sources give the weakness CWE-1392, newest first. ## Records, newest first (an older page) - [Skupper uses a static cookie secret for the openshift oauth-proxy in github.com/skupperproject/skupper](https://agentprime.io/advisories/GHSA-w799-v85j-88pg.md) `GHSA-w799-v85j-88pg`, `CVE-2024-6535`, `GO-2024-2987` · Go `github.com/skupperproject/skupper`: affected `<0.0.0-20240703184342-c26bce4079ff`, fixed in `0.0.0-20240703184342-c26bce4079ff` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jul 2024 · Tags: CWE-1392 - [Philips Vue PACS Use of Default Credentials](https://agentprime.io/advisories/CVE-2023-40704.md) `CVE-2023-40704` · CVE record: Philips Vue PACS · CVSS 5.7 Medium · Not analysed yet · Published 18 Jul 2024 · Tags: CWE-1392 - [Longse Technology NVR3608PGE2W: Longse NVR (Network Video Recorder) model NVR3608PGE2W…](https://agentprime.io/advisories/CVE-2024-5632.md) `CVE-2024-5632` · CVE record: Longse Technology NVR3608PGE2W and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2024 · Tags: CWE-1392 - [Hard coded default credential contained in install package](https://agentprime.io/advisories/CVE-2024-4007.md) `CVE-2024-4007` · CVE record: ABB ASPECT Enterprise (ASP-ENT-x) and 2 more · CVSS 8.7 High · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-1392 - [Hardcoded root password](https://agentprime.io/advisories/CVE-2024-27158.md) `CVE-2024-27158` · CVE record: Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP) · CVSS 7.4 High · Not analysed yet · Published 14 Jun 2024 · Tags: CWE-1392 - [Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account.](https://agentprime.io/advisories/CVE-2023-43844.md) `CVE-2023-43844` · CVE record · CVSS 8.0 High · Not analysed yet · Published 28 May 2024 · Tags: CWE-1392 - [NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-5245.md) `CVE-2024-5245` · CVE record: NETGEAR ProSAFE Network Management System · CVSS 7.8 High · Not analysed yet · Published 23 May 2024 · Tags: CWE-1392 - [alpitronic Hypercharger EV Charger Use of Default Credentials](https://agentprime.io/advisories/CVE-2024-4622.md) `CVE-2024-4622` · CVE record: alpitronic Hypercharger EV Charger · CVSS 8.3 High · Not analysed yet · Published 15 May 2024 · Tags: CWE-1392 - [Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions](https://agentprime.io/advisories/CVE-2024-29844.md) `CVE-2024-29844` · CVE record: CS Technologies Australia Evolution Controller · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Apr 2024 · Tags: CWE-1392 - [IOSIX IO-1020 Micro ELD Use of Default Credentials](https://agentprime.io/advisories/CVE-2024-31069.md) `CVE-2024-31069` · CVE record: IOSiX IO-1020 Micro ELD · CVSS 7.4 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1392 - [IOSIX IO-1020 Micro ELD Use of Default Credentials](https://agentprime.io/advisories/CVE-2024-30210.md) `CVE-2024-30210` · CVE record: IOSiX IO-1020 Micro ELD · CVSS 7.4 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1392 - [The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.](https://agentprime.io/advisories/CVE-2024-28093.md) `CVE-2024-28093` · CVE record · CVSS 8.8 High · Not analysed yet · Published 26 Mar 2024 · Tags: CWE-1392 - [A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7).](https://agentprime.io/advisories/CVE-2023-49621.md) `CVE-2023-49621` · CVE record: Siemens SIMATIC CN 4100 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jan 2024 · Tags: CWE-1392 - [qBittorrent Web UI Default Credentials Lead to RCE](https://agentprime.io/advisories/CVE-2023-30801.md) `CVE-2023-30801` · CVE record: qBittorrent qBittorrent client · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-1392 - [Proscend Advice ICR Series routers fw version 1.76](https://agentprime.io/advisories/CVE-2023-3703.md) `CVE-2023-3703` · CVE record: Proscend Advice ICR Series routers FW · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Sept 2023 · Tags: CWE-1392 - [Hitron Technologies Inc. CODA-5310 - Using default credentials](https://agentprime.io/advisories/CVE-2023-30603.md) `CVE-2023-30603` · CVE record: Hitron Technologies Inc. Hitron CODA-5310 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2023 · Tags: CWE-1392 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .