Advisories · Weakness
CWE-1392.
Every Advisory and CVE whose sources give the weakness CWE-1392, newest first.
- CVSS 8.7 High
Adtec Digital SignEdje Digital Signage Player v2.08.28 Default Credentials
- Adtecdigital SignEdje Digital Signage Player
- Adtecdigital mediaHUB HD-Pro High & Standard Definition MPEG2 Encoder
- Hard-coded credentials
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
JM-DATA ONU JF511-TV 1.0.67 Default Credentials Vulnerability
- JM-DATA ONU JF511-TV
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
Microhard Systems IPn4G 1.1.0 Default Credentials Authentication Bypass
- Microhard Systems 3G/4G Cellular Ethernet and Serial Gateway Default Credentials
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
COMMAX CVD-Axx DVR Weak Default Credentials Stream Disclosure
- COMMAX Co., Ltd. COMMAX CVD-Axx DVR
- CWE-1392
- CVSS 9.8 CriticalCritical · CVSS 9+
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API.
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
Use of default login credentials in Legacy Vivotek Devices
- Vivotek Affected device model numbers are FD7131-VVTK,FD7131-VVTK,FD7131-VVTK,FD7141-VVTK,IP7131-VVTK,IP7133-VVTK,IP7133-VVTK,IP7133-VVTK,IP7134-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7135-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7137-VVTK,IP7138-VVTK,IP7142-VVTK,IP7142-VVTK,IP7151-VVTK,IP7152-VVTK,IP7153-VVTK,IP7153-VVTK,IP7154-VVTK,IP7330-VVTK,IP7330-VVTK,IP7330-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131-VVTK,IP8131W-VVTK,PT7135-VVTK,PT7137-TCON,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PT7137-VVTK,PZ7131-VVTK,PZ7131-VVTK,PZ71X1-VVTK,PZ71X1-VVTK,PZ71X2-VVTK,SD73X3-VVTK,SD73X3-VVTK,SD73X3-VVTK,TC5330-VVTK,TC5332-TCVV,TC5333-TCVV,TC5633-TCVV,TC5633-VVTK,VS7100-VVTK,VS7100-VVTK,VS7100-VVTK
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
NetBird VPN does not remove the default password of an admin account in github.com/netbirdio/netbird
- CWE-1392
<0.57.0 · fixed in 0.57.0
GHSA-g3j4-58mp-3x25 · CVE-2025-10678 - CVSS 10.0 CriticalCritical · CVSS 9+
Weak Default Credentials
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1392
- CVSS 6.9 Medium
SNMP Default Community String (public)
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-1392
- CVSS 6.9 Medium
70mai X200 HTTP Web Server default credentials
- 70mai X200
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials
- Ilevia Srl. EVE X1 Server
- CWE-1392
- CVSS 9.8 CriticalCritical · CVSS 9+
Insecure Default Admin Credentials Enable Full Administrative Access in iMonitor EAM
- iMonitor Software Inc. iMonitor EAM
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
Airship AI Acropolis default credentials
- Airship AI Acropolis
- CWE-1392
- CVSS 5.7 Medium
BMC Control-M/Agent hardcoded default keystore password
- BMC Control-M/Agent
- CWE-1392
- CVSS 10.0 CriticalCritical · CVSS 9+
CWE-1392: Use of Default Credentials
- Baicells NOVA430e/430i, NOVA436Q, NEUTRINO430, NOVA846
- CWE-1392
- CVSS 9.2 CriticalCritical · CVSS 9+
Pan-Tilt-Zoom cameras default administrative credentials for web interface
- PTZOptics PT12X-SE-xx-G3
- PTZOptics PT12X-LINK-4K-xx
- Hard-coded credentials
- CWE-1392
- CVSS 6.5 Medium
Default Credentials in nginx-defender Configuration Files in github.com/Anipaleja/nginx-defender
- CWE-1392
<1.5.0 · fixed in 1.5.0
GHSA-pr72-8fxw-xx22 · CVE-2025-55740 - CVSS 2.0 Low
TOTOLINK X2000R Administrative shadow.sample default credentials
- TOTOLINK X2000R
- CWE-1392
- CVSS 2.0 Low
seeedstudio ReSpeaker Administrative shadow default credentials
- seeedstudio ReSpeaker
- CWE-1392
- CVSS 8.7 High
Agiloft local privilege escalation via default credentials
- Agiloft
- CWE-1392
- CVSS 5.3 Medium
DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel.
- CWE-1392
- CVSS 5.3 Medium
Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack.
- CWE-1392
- CVSS 5.3 Medium
Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images
- Palo Alto Networks Cortex XDR Broker VM
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials
- TRENDnet TI-G160i
- TRENDnet TI-PG102i
- CWE-1392
- CVSS 6.9 Medium
elunez eladmin Druid application-prod.yml default credentials
- elunez eladmin
- CWE-1392
- CVSS 9.8 CriticalCritical · CVSS 9+
Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.
- Hard-coded credentials
- CWE-1392
- CVSS 9.1 CriticalCritical · CVSS 9+
Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.
- CWE-1392
- CVSS 9.1 CriticalCritical · CVSS 9+
Information disclosure in Gardyn Home Kit Firmware
- Gardyn Home Kit Firmware
- Code injection
- Information disclosure
- CVSS 7.3 High
NodeJS version of the HAX CMS application is distributed with Default Secrets
- CWE-1392
<11.0.10 · fixed in 11.0.10
GHSA-5fpv-5qvh-7cf3 · CVE-2025-54137 - CVSS 5.3 Medium
yangzongzhuan RuoYi Druid application-druid.yml default credentials
- yangzongzhuan RuoYi
- CWE-1392
- CVSS 4.3 Medium
CVE-2025-1711
- Endress+Hauser MEAC300-FNADE4
- CWE-1392
- CVSS 5.3 Medium
SAFECAM X300 FTP Service default credentials
- SAFECAM X300
- CWE-1392
- CVSS 5.9 Medium
File Browser vulnerable to insecure password handling
- Authentication bypass
- Hard-coded credentials
<=1.11.0 · no fixed version yet
GHSA-cm2r-rg7r-p7gg · CVE-2025-52997 - CVSS 8.7 High
70mai M300 Telnet Service default credentials
- 70mai M300
- CWE-1392
- CVSS 6.5 Medium
Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.
- CWE-1392
- CVSS 9.2 CriticalCritical · CVSS 9+
Sony SNC-M1 Administrative Interface default credentials
- Sony SNC-M1
- Sony SNC-M3
- CWE-1392
- CVSS 6.5 Medium
Authentication credentials leakage vulnerability in Hitachi Ops Center Analyzer viewpoint OVF
- Hitachi Ops Center Analyzer viewpoint
- CWE-1392
- CVSS 7.8 High
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges.
- Ivanti CSA (Cloud Services Appliance)
- CWE-1392
- CVSS 7.1 High
Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF
- Hitachi Ops Center Common Services
- Hitachi Ops Center Analyzer viewpoint OVF
- CWE-1392
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue was discovered on G-Net Dashcam BB GONX devices.
- CWE-1392
- CVSS 8.6 High
China Mobile P22g-CIac CLI su Command default credentials
- China Mobile P22g-CIac
- China Mobile ZXWT-MIG-P4G4V
- CWE-1392
- CVSS 2.3 Low
IROAD Dash Cam X5 SSID default credentials
- IROAD Dash Cam X5
- CWE-1392
- CVSS 1.0 Low
Thinkware Car Dashcam F800 Pro Device Registration default credentials
- Thinkware Car Dashcam F800 Pro
- CWE-1392
- CVSS 7.5 High
Shared credentials in Smartwares cameras
- Smartwares CIP-37210AT
- Smartwares C724IP
- CWE-1392
- CVSS 7.6 High
Zettler 130.8005: A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP…
- Zettler 130.8005
- CWE-1392
- CVSS 8.7 High
Siemens SIPROTEC 5 6MD84 (CP300): A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.90)…
- Siemens SIPROTEC 5 6MD84 (CP300)
- Siemens SIPROTEC 5 6MD85 (CP300)
- CWE-1392
- CVSS 6.9 Medium
SourceCodester Employee Management System index.php default credentials
- SourceCodester Employee Management System
- CWE-1392
- CVSS 8.7 High
Fedora Repository fedoraIntCallUser default credentials
- Fedora Repository
- CWE-1392
- CVSS 6.9 Medium
Fanli2012 native-php-cms user_recoverpwd.php default credentials
- Fanli2012 native-php-cms
- CWE-1392
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
Four-Faith Industrial Router adjust_sys_time OS Command Injection
- Four-Faith F3x24
- Four-Faith F3x36
- Command injection
- CWE-1392
- CVSS 8.4 High
Global Wisdom Software ANCHOR - Undocumented Privileged Account
- Global Wisdom Software ANCHOR
- CWE-1392
- CVSS 8.0 High
Default credentials are used in the above listed BD Diagnostic Solutions products.
- Becton Dickinson & Co BD BACTEC™ Blood Culture System
- Becton Dickinson & Co BD COR™ System
- CWE-1392
- CVSS 9.3 CriticalCritical · CVSS 9+
MOBATIME Network Master Clock has a use of default credentials vulnerability
- MOBATIME Network Master Clock - DTS 4801
- CWE-1392
- CVSS 7.1 High
Authentication credentials leakage vulnerability in Hitachi Ops Center Common Services within Hitachi Ops Center OVA
- Hitachi Ops Center Common Services
- Hitachi Ops Center OVA
- CWE-1392
- CVSS 7.4 High
Default Credentials in ssh service for SmartPlay in Maruti Suzuki
- Faurecia Clarion Electronics Co., Ltd. SmartPlay
- CWE-1392
- CVSS 8.1 High
IBM Sterling Connect:Direct Web Services information disclosure
- IBM Sterling Connect:Direct Web Services
- CWE-1392
- CVSS 8.2 High
Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability.
- Dell Client Platform BIOS
- CWE-1392
- CVSS 6.9 Medium
Tosei Online Store Management System ネット店舗管理システム Backend default credentials
- Tosei Online Store Management System ネット店舗管理システム
- CWE-1392
- CVSS 9.5 CriticalCritical · CVSS 9+
Use of default credentials at Traccar fleet management solution
- Traccar Server
- CWE-1392
- CVSS 8.6 High
Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password
- PHOENIX CONTACT CHARX SEC-3000
- PHOENIX CONTACT CHARX SEC-3050
- CWE-1392