CWE-1392.

IRISPowerscan Default accounts with predictable credentials

• I.R.I.S S.A. IRISPowerscan
• CWE-1392

Etrel INCH AC Charging Station Hard-coded Default Credentials

• Etrel d.o.o. Etrel INCH
• CWE-1392

Use of default password based on serial number

• Delta Electronics Delta UFC500
• CWE-1392

Default WebUI passwords stored in plaintext

• Delta Electronics Delta UFC500
• CWE-1392

Use of Default Credentials in boneIO

• boneIO black_debian_images
• CWE-1392

OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)

• zephyr
• CWE-1392

Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorization bypass

• intranda goobi-viewer-core
• Authentication bypass
• CWE-1392

DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment

• eosphoros-ai DB-GPT
• CWE-1392

FlyCms through commit edfdf724 Default Super Administrator Credentials

• sunkaifei FlyCms
• CWE-1392

Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

• vanus
• CWE-1392

DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials

• databuff
• CWE-1392

JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

• JuggleIM
• CWE-1392

PRVTPRO Amnezia-Web-Panel Backup Download app.py default credentials

• PRVTPRO Amnezia-Web-Panel
• CWE-1392

Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

• iflytek astron-agent
• Code injection
• Authentication bypass

Authentication bypass via default auth token in P4Search

• Perfoce P4 (Helix Core)
• CWE-1392

Default Admin Credentials in Innotim Software's Logsign SIEM

• Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM
• CWE-1392

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

• yzcheng90 X-SpringBoot
• CWE-1392

ningzichun student-management-system example_lite.sql default credentials

• ningzichun student-management-system
• CWE-1392

novel-plus through 5.3.3 Default Cache Management Password in the Front Portal

• 201206030 novel-plus
• CWE-1392

lenve vhr vhr.sql default credentials

• lenve vhr
• CWE-1392

Use of default credentials in Malcolm

• CISA Malcolm
• CWE-1392

Use of Default Credentials in Malcolm

• CISA Malcolm
• CWE-1392

IBM ContextForge MCP Gateway is affected by use of default credentials

• IBM ContextForge MCP Gateway
• CWE-1392

Information disclosure in Eclipse Foundation Eclipse aeriOS

• Eclipse Foundation Eclipse aeriOS
• Information disclosure
• Authentication bypass

Datiphy Data Management Center - Use of Default Credentials

• Datiphy Inc. Data Management Center
• CWE-1392

GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)

• Other injection
• Information disclosure

<1.2.4 · fixed in 1.2.4

Use of hard-coded VNC credentials in the engineering-workstation provisioning

• ANDRITZ HIPASE-250
• ANDRITZ 250 SCALA
• Hard-coded credentials
• CWE-1392

LazyOwn: Default C2 Operator Credentials Enable Administrative Access to C2 Dashboard

• grisuno LazyOwn
• CWE-1392

Care Everywhere Gateway 14.3.10 Hard-coded Credentials RCE via WildFly

• Care Everywhere LLC Care Everywhere Gateway
• CWE-1392

Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password

• CWE-1392

<2.0.8 · fixed in 2.0.8

Insecure Sample Credentials in SAP Commerce Cloud

• SAP_SE SAP Commerce Cloud
• CWE-1392

IBM API Connect Default Credentials

• IBM API Connect
• CWE-1392

AutoBangumi < 3.2.8 - Hard-coded Default Credentials via add_default_user()

• EstrellaXD Auto_Bangumi
• CWE-1392

JAIOTlink C492A-W6 4.8.30.57701411 Hard-coded Credentials via anyka_ipc

• JAIOTlink C492A-W6 Wi-Fi IP Camera
• CWE-1392

OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal`

• opf openproject
• Insecure deserialization
• Hard-coded credentials

Dell Wyse Management Suite (WMS): Dell Wyse Management Suite (WMS), versions prior to WMS 2605…

• Dell Wyse Management Suite (WMS)
• CWE-1392

Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability.

• Dell AIOps
• CWE-1392

Brickcom Cameras Use of Default Credentials

• Brickcom Cube
• Brickcom Dome
• CWE-1392

Vulnerability in navify® Digital Pathology

• Roche Diagnostics navify Digital Pathology
• CWE-1392

MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials

• Danelec MacGregor Voyage Data Recorder (VDR) G4e
• CWE-1392

RustFS: Internode RPC HMAC secret falls back to public default credential, enabling peer impersonation

• rustfs
• Hard-coded credentials
• CWE-1392

IBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installation

• IBM Operations Analytics - Log Analysis
• CWE-1392

Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0) - Cyclops.

• IBM Cloud Pak for Data System - Cyclops
• CWE-1392

Tyler Identity Local (TID-L) default administrative credentials

• Tyler Technologies TID-L
• CWE-1392

Insecure default administrative credentials in AlloyDB for PostgreSQL

• Google Cloud AlloyDB for PostgreSQL
• CWE-1392

NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access

• CWE-1392

<1.0.42-hotfix · fixed in 1.0.42-hotfix

netbox-community netbox-docker: netbox-docker before 2.5.0 has a superuser account with default credentials (admin…

• netbox-community netbox-docker
• CWE-1392

Istio JWKS resolver to prevent private key material from being exposed when JWKS fetch fails.

• istio
• Information disclosure
• CWE-1392

Default credentials set for local privileged user in Virtual Appliance.

• Acronis Cyber Protect Cloud Agent
• Acronis Cyber Protect 17
• CWE-1392

Weak credentials in Eclipse Foundation Eclipse OpenMQ

• Eclipse Foundation Eclipse OpenMQ
• Hard-coded credentials
• CWE-1392

SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials

• Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS
• CWE-1392

Tattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials

• Tattile s.r.l. Smart+
• Tattile s.r.l. Tolling+
• CWE-1392

JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials

• JUNG eNet SMART HOME server
• CWE-1392

BrightSign Players Use of Default Credentials

• BrightSign OS series 4 players
• BrightSign OS series 5 players
• CWE-1392

Edimax BR-6208AC auth_check_userpass2 default credentials

• Edimax BR-6208AC
• CWE-1392

Ziroom ZHOME A0101 Dropbear SSH Service default credentials

• Ziroom ZHOME A0101
• CWE-1392

Use of default credentials vulnerability in Hitachi Energy SuprOS product

• Hitachi Energy SuprOS
• CWE-1392

Weak Default Passwords in dormakaba access manager

• dormakaba Access Manager 92xx-k5
• dormakaba Access Manager 92xx-k7
• CWE-1392

Dell ObjectScale: Dell ECS, versions 3.8.1.0 through 3.8.1.7…

• Dell ObjectScale
• CWE-1392

Hard-Coded Default Credentials Enable Document Archive Decryption in Milner ImageDirector Capture

• Milner ImageDirector Capture
• Hard-coded credentials
• CWE-1392