# CWE-1392.

Every Advisory and CVE whose sources give the weakness CWE-1392, newest first.

## Records, newest first (an older page)

- [Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials](https://agentprime.io/advisories/CVE-2020-36915.md)
  `CVE-2020-36915` · CVE record: Adtecdigital SignEdje Digital Signage Player and 4 more · CVSS 8.7 High · Not analysed yet · Published 6 Jan 2026 · Tags: Hard-coded credentials, CWE-1392
- [JM-DATA ONU JF511-TV 1.0.67 Default Credentials Vulnerability](https://agentprime.io/advisories/CVE-2022-50803.md)
  `CVE-2022-50803` · CVE record: JM-DATA ONU JF511-TV · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Dec 2025 · Tags: CWE-1392
- [Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass](https://agentprime.io/advisories/CVE-2018-25147.md)
  `CVE-2018-25147` · CVE record: Microhard Systems Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Dec 2025 · Tags: CWE-1392
- [COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure](https://agentprime.io/advisories/CVE-2021-47707.md)
  `CVE-2021-47707` · CVE record: COMMAX Co., Ltd. COMMAX CVD-Axx DVR · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-1392
- [The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.](https://agentprime.io/advisories/CVE-2025-54303.md)
  `CVE-2025-54303` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-1392
- [Use of default login credentials in Legacy Vivotek Devices](https://agentprime.io/advisories/CVE-2025-12592.md)
  `CVE-2025-12592` · CVE record: Vivotek Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Nov 2025 · Tags: CWE-1392
- [NetBird VPN does not remove the default password of an admin account in github.com/netbirdio/netbird](https://agentprime.io/advisories/GHSA-g3j4-58mp-3x25.md)
  `GHSA-g3j4-58mp-3x25`, `CVE-2025-10678`, `GO-2025-4040` · Go `github.com/netbirdio/netbird`: affected `<0.57.0`, fixed in `0.57.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-1392
- [Weak Default Credentials](https://agentprime.io/advisories/CVE-2025-12218.md)
  `CVE-2025-12218` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1392
- [SNMP Default Community String (public)](https://agentprime.io/advisories/CVE-2025-12217.md)
  `CVE-2025-12217` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 25 Oct 2025 · Tags: CWE-1392
- [70mai X200 HTTP Web Server default credentials](https://agentprime.io/advisories/CVE-2025-11943.md)
  `CVE-2025-11943` · CVE record: 70mai X200 · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2025 · Tags: CWE-1392
- [Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials](https://agentprime.io/advisories/CVE-2025-34516.md)
  `CVE-2025-34516` · CVE record: Ilevia Srl. EVE X1 Server · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-1392
- [Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM](https://agentprime.io/advisories/CVE-2025-10542.md)
  `CVE-2025-10542` · CVE record: iMonitor Software Inc. iMonitor EAM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Sept 2025 · Tags: CWE-1392
- [Airship AI Acropolis default credentials](https://agentprime.io/advisories/CVE-2025-35042.md)
  `CVE-2025-35042` · CVE record: Airship AI Acropolis · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2025 · Tags: CWE-1392
- [BMC Control-M/Agent hardcoded default keystore password](https://agentprime.io/advisories/CVE-2025-55110.md)
  `CVE-2025-55110` · CVE record: BMC Control-M/Agent · CVSS 5.7 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-1392
- [CWE-1392: Use of Default Credentials](https://agentprime.io/advisories/CVE-2025-55051.md)
  `CVE-2025-55051` · CVE record: Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1392
- [Pan-Tilt-Zoom cameras default administrative credentials for web interface](https://agentprime.io/advisories/CVE-2025-35452.md)
  `CVE-2025-35452` · CVE record: PTZOptics PT12X-SE-xx-G3 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Sept 2025 · Tags: Hard-coded credentials, CWE-1392
- [Default Credentials in nginx-defender Configuration Files in github.com/Anipaleja/nginx-defender](https://agentprime.io/advisories/GHSA-pr72-8fxw-xx22.md)
  `GHSA-pr72-8fxw-xx22`, `CVE-2025-55740`, `GO-2025-3896` · Go `github.com/Anipaleja/nginx-defender`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 6.5 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: CWE-1392
- [TOTOLINK X2000R Administrative shadow.sample default credentials](https://agentprime.io/advisories/CVE-2025-9577.md)
  `CVE-2025-9577` · CVE record: TOTOLINK X2000R · CVSS 2.0 Low · Not analysed yet · Published 28 Aug 2025 · Tags: CWE-1392
- [seeedstudio ReSpeaker Administrative shadow default credentials](https://agentprime.io/advisories/CVE-2025-9576.md)
  `CVE-2025-9576` · CVE record: seeedstudio ReSpeaker · CVSS 2.0 Low · Not analysed yet · Published 28 Aug 2025 · Tags: CWE-1392
- [Agiloft local privilege escalation via default credentials](https://agentprime.io/advisories/CVE-2025-35114.md)
  `CVE-2025-35114` · CVE record: Agiloft Agiloft · CVSS 8.7 High · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-1392
- [DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel.](https://agentprime.io/advisories/CVE-2025-29525.md)
  `CVE-2025-29525` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: CWE-1392
- [Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack.](https://agentprime.io/advisories/CVE-2025-29521.md)
  `CVE-2025-29521` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: CWE-1392
- [Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images](https://agentprime.io/advisories/CVE-2025-2184.md)
  `CVE-2025-2184` · CVE record: Palo Alto Networks Cortex XDR Broker VM · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2025 · Tags: CWE-1392
- [TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials](https://agentprime.io/advisories/CVE-2025-8731.md)
  `CVE-2025-8731` · CVE record: TRENDnet TI-G160i and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Aug 2025 · Tags: CWE-1392
- [elunez eladmin Druid application-prod.yml default credentials](https://agentprime.io/advisories/CVE-2025-8530.md)
  `CVE-2025-8530` · CVE record: elunez eladmin · CVSS 6.9 Medium · Not analysed yet · Published 4 Aug 2025 · Tags: CWE-1392
- [Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.](https://agentprime.io/advisories/CVE-2025-51536.md)
  `CVE-2025-51536` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2025 · Tags: Hard-coded credentials, CWE-1392
- [Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.](https://agentprime.io/advisories/CVE-2025-51535.md)
  `CVE-2025-51535` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2025 · Tags: CWE-1392
- [Information disclosure in Gardyn Home Kit Firmware](https://agentprime.io/advisories/CVE-2025-29629.md)
  `CVE-2025-29629` · CVE record: Gardyn Home Kit Firmware · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jul 2025 · Tags: Code injection, Information disclosure, CWE-1392
- [NodeJS version of the HAX CMS application is distributed with Default Secrets](https://agentprime.io/advisories/GHSA-5fpv-5qvh-7cf3.md)
  `GHSA-5fpv-5qvh-7cf3`, `CVE-2025-54137` · npm `@haxtheweb/haxcms-nodejs`: affected `<11.0.10`, fixed in `11.0.10` · CVSS 7.3 High · Not analysed yet · Published 21 Jul 2025 · Tags: CWE-1392
- [yangzongzhuan RuoYi Druid application-druid.yml default credentials](https://agentprime.io/advisories/CVE-2025-7907.md)
  `CVE-2025-7907` · CVE record: yangzongzhuan RuoYi · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2025 · Tags: CWE-1392
- [CVE-2025-1711](https://agentprime.io/advisories/CVE-2025-1711.md)
  `CVE-2025-1711` · CVE record: Endress+Hauser Endress+Hauser MEAC300-FNADE4 · CVSS 4.3 Medium · Not analysed yet · Published 3 Jul 2025 · Tags: CWE-1392
- [SAFECAM X300 FTP Service default credentials](https://agentprime.io/advisories/CVE-2025-6951.md)
  `CVE-2025-6951` · CVE record: SAFECAM X300 · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2025 · Tags: CWE-1392
- [File Browser vulnerable to insecure password handling](https://agentprime.io/advisories/GHSA-cm2r-rg7r-p7gg.md)
  `GHSA-cm2r-rg7r-p7gg`, `CVE-2025-52997`, `GO-2025-3792` · Go `github.com/filebrowser/filebrowser` and 1 more: affected `<=1.11.0`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2025 · Tags: Authentication bypass, Hard-coded credentials, CWE-1392
- [70mai M300 Telnet Service default credentials](https://agentprime.io/advisories/CVE-2025-6529.md)
  `CVE-2025-6529` · CVE record: 70mai M300 · CVSS 8.7 High · Not analysed yet · Published 23 Jun 2025 · Tags: CWE-1392
- [Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.](https://agentprime.io/advisories/CVE-2024-40113.md)
  `CVE-2024-40113` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-1392
- [Sony SNC-M1 Administrative Interface default credentials](https://agentprime.io/advisories/CVE-2025-5124.md)
  `CVE-2025-5124` · CVE record: Sony SNC-M1 and 4 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 May 2025 · Tags: CWE-1392
- [Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF](https://agentprime.io/advisories/CVE-2025-1531.md)
  `CVE-2025-1531` · CVE record: Hitachi Hitachi Ops Center Analyzer viewpoint · CVSS 6.5 Medium · Not analysed yet · Published 16 May 2025 · Tags: CWE-1392
- [Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.](https://agentprime.io/advisories/CVE-2025-22460.md)
  `CVE-2025-22460` · CVE record: Ivanti CSA (Cloud Services Appliance) · CVSS 7.8 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-1392
- [Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF](https://agentprime.io/advisories/CVE-2024-46899.md)
  `CVE-2024-46899` · CVE record: Hitachi Hitachi Ops Center Common Services and 1 more · CVSS 7.1 High · Not analysed yet · Published 22 Apr 2025 · Tags: CWE-1392
- [An issue was discovered on G-Net Dashcam BB GONX devices.](https://agentprime.io/advisories/CVE-2025-30139.md)
  `CVE-2025-30139` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Mar 2025 · Tags: CWE-1392
- [China Mobile P22g-CIac CLI su Command default credentials](https://agentprime.io/advisories/CVE-2025-2398.md)
  `CVE-2025-2398` · CVE record: China Mobile P22g-CIac and 4 more · CVSS 8.6 High · Not analysed yet · Published 17 Mar 2025 · Tags: CWE-1392
- [IROAD Dash Cam X5 SSID default credentials](https://agentprime.io/advisories/CVE-2025-2341.md)
  `CVE-2025-2341` · CVE record: IROAD Dash Cam X5 · CVSS 2.3 Low · Not analysed yet · Published 16 Mar 2025 · Tags: CWE-1392
- [Thinkware Car Dashcam F800 Pro Device Registration default credentials](https://agentprime.io/advisories/CVE-2025-2119.md)
  `CVE-2025-2119` · CVE record: Thinkware Car Dashcam F800 Pro · CVSS 1.0 Low · Not analysed yet · Published 9 Mar 2025 · Tags: CWE-1392
- [Shared credentials in Smartwares cameras](https://agentprime.io/advisories/CVE-2024-13893.md)
  `CVE-2024-13893` · CVE record: Smartwares CIP-37210AT and 1 more · CVSS 7.5 High · Not analysed yet · Published 6 Mar 2025 · Tags: CWE-1392
- [Zettler 130.8005: A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP…](https://agentprime.io/advisories/CVE-2024-12013.md)
  `CVE-2024-12013` · CVE record: Zettler 130.8005 · CVSS 7.6 High · Not analysed yet · Published 13 Feb 2025 · Tags: CWE-1392
- [Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90)…](https://agentprime.io/advisories/CVE-2024-54015.md)
  `CVE-2024-54015` · CVE record: Siemens SIPROTEC 5 6MD84 (CP300) and 4 more · CVSS 8.7 High · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1392
- [SourceCodester Employee Management System index.php default credentials](https://agentprime.io/advisories/CVE-2025-1160.md)
  `CVE-2025-1160` · CVE record: SourceCodester Employee Management System · CVSS 6.9 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: CWE-1392
- [Fedora Repository fedoraIntCallUser default credentials](https://agentprime.io/advisories/CVE-2025-23012.md)
  `CVE-2025-23012` · CVE record: Fedora Repository Fedora Repository · CVSS 8.7 High · Not analysed yet · Published 23 Jan 2025 · Tags: CWE-1392
- [Fanli2012 native-php-cms user_recoverpwd.php default credentials](https://agentprime.io/advisories/CVE-2025-0482.md)
  `CVE-2025-0482` · CVE record: Fanli2012 native-php-cms · CVSS 6.9 Medium · Not analysed yet · Published 15 Jan 2025 · Tags: CWE-1392
- [Four-Faith Industrial Router adjust_sys_time OS Command Injection](https://agentprime.io/advisories/CVE-2024-12856.md)
  `CVE-2024-12856` · CVE record: Four-Faith F3x24 and 1 more · CVSS 7.2 High · Critical (CVSS 7+ and EPSS) · EPSS 0.84 · Not analysed yet · Published 27 Dec 2024 · Tags: Command injection, CWE-1392
- [Global Wisdom Software ANCHOR - Undocumented Privileged Account](https://agentprime.io/advisories/CVE-2024-12902.md)
  `CVE-2024-12902` · CVE record: Global Wisdom Software ANCHOR · CVSS 8.4 High · Not analysed yet · Published 23 Dec 2024 · Tags: CWE-1392
- [Default credentials are used in the above listed BD Diagnostic Solutions products.](https://agentprime.io/advisories/CVE-2024-10476.md)
  `CVE-2024-10476` · CVE record: Becton Dickinson & Co BD BACTEC™ Blood Culture System and 4 more · CVSS 8.0 High · Not analysed yet · Published 17 Dec 2024 · Tags: CWE-1392
- [MOBATIME Network Master Clock has a use of default credentials vulnerability](https://agentprime.io/advisories/CVE-2024-12286.md)
  `CVE-2024-12286` · CVE record: MOBATIME Network Master Clock - DTS 4801 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-1392
- [Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA](https://agentprime.io/advisories/CVE-2024-45068.md)
  `CVE-2024-45068` · CVE record: Hitachi Hitachi Ops Center Common Services and 1 more · CVSS 7.1 High · Not analysed yet · Published 3 Dec 2024 · Tags: CWE-1392
- [Default Credentials in ssh service for SmartPlay in Maruti Suzuki](https://agentprime.io/advisories/CVE-2024-6245.md)
  `CVE-2024-6245` · CVE record: Faurecia Clarion Electronics Co., Ltd. SmartPlay · CVSS 7.4 High · Not analysed yet · Published 28 Oct 2024 · Tags: CWE-1392
- [IBM Sterling Connect:Direct Web Services information disclosure](https://agentprime.io/advisories/CVE-2024-39747.md)
  `CVE-2024-39747` · CVE record: IBM Sterling Connect:Direct Web Services · CVSS 8.1 High · Not analysed yet · Published 31 Aug 2024 · Tags: CWE-1392
- [Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.](https://agentprime.io/advisories/CVE-2024-39584.md)
  `CVE-2024-39584` · CVE record: Dell Dell Client Platform BIOS · CVSS 8.2 High · Not analysed yet · Published 28 Aug 2024 · Tags: CWE-1392
- [Tosei Online Store Management System ネット店舗管理システム Backend default credentials](https://agentprime.io/advisories/CVE-2024-7898.md)
  `CVE-2024-7898` · CVE record: Tosei Online Store Management System ネット店舗管理システム · CVSS 6.9 Medium · Not analysed yet · Published 17 Aug 2024 · Tags: CWE-1392
- [Use of default credentials at Traccar fleet management solution](https://agentprime.io/advisories/CVE-2024-7746.md)
  `CVE-2024-7746` · CVE record: Traccar Server · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-1392
- [Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password](https://agentprime.io/advisories/CVE-2024-6788.md)
  `CVE-2024-6788` · CVE record: PHOENIX CONTACT CHARX SEC-3000 and 3 more · CVSS 8.6 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-1392

Newest: <https://agentprime.io/advisories/tag/cwe-1392.md>
Older: <https://agentprime.io/advisories/tag/cwe-1392.md?cursor=WyIyMDI0LTA4LTEzVDEzOjE1OjAzLjEyMDAwMFoiLCJDVkUtMjAyNC02Nzg4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1392&cursor=WyIyMDI2LTAxLTIwVDIxOjM4OjAyLjM2MTAwMFoiLCJDVkUtMjAyNS01ODc0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1392/?cursor=WyIyMDI2LTAxLTIwVDIxOjM4OjAyLjM2MTAwMFoiLCJDVkUtMjAyNS01ODc0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.