CWE-1393.

Default Administrator Password Change Not Enforced in Axxon One Web Client

• AxxonSoft Axxon One
• CWE-1393

diem-project diem dmDataLoad.php default password

• diem
• CWE-1393

Lenovo Smart Camera C33: A potential vulnerability was reported in Lenovo Smart Camera C33…

• Lenovo Smart Camera C33
• Lenovo Smart Camera C33 Pro
• CWE-1393

Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise

• CWE-653
• CWE-1393

<4.5.6 · fixed in 4.5.6

XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).

• Xing Inc. XING CPTrans-ME-X
• CWE-1393

sambitraj Student-Management-System aca.sql default password

• sambitraj Student-Management-System
• CWE-1393

Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5

• Dassault Systèmes Tuleap Enterprise Edition
• CWE-1393

VPS.org one-click Zulip template deployment instance contains multiple vulnerabilities

• VPS.org Zulip template
• Hard-coded credentials
• CWE-1188

VPS.org one-click Supabase template deployment instance contains multiple vulnerabilities

• VPS.org Supabase template
• CWE-1188
• CWE-1327

Navigator NCS and MCP System Accounts with Default Passwords

• CIENA Navigator NCS
• CIENA MCP
• CWE-1393

Vantage6: Set admin user and password from environment or configuration

• CWE-204
• CWE-1393

<5.0.0 · fixed in 5.0.0

Hardcoded default Password for Service Account

• MBS Single-A
• MBS Double-A Profibus
• CWE-1393

Default credentials for internal DB

• syslink software AG Avantra
• CWE-1393

JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access

• Juniper Networks JSI LWC
• CWE-1393

IBM WebSphere Application Server Liberty could provide weaker than expected security

• IBM WebSphere Application Server - Liberty
• CWE-1393

Harbor allows the use of the default password for web UI login

• Hard-coded credentials
• CWE-1393

<=2.15.0 · no fixed version yet

Weak credentials in Eclipse Foundation Eclipse OpenMQ

• Eclipse Foundation Eclipse OpenMQ
• Hard-coded credentials
• CWE-1392

feiyuchuixue sz-boot-parent Password Reset password default password

• feiyuchuixue sz-boot-parent
• CWE-1393

MLflow Use of Default Password Authentication Bypass Vulnerability

• Hard-coded credentials
• CWE-1393

<3.8.0rc0 · fixed in 3.8.0rc0

Tenda W30E V2 Hardcoded Default Password for Built-in Account

• Shenzhen Tenda Technology Co., Ltd. W30E V2
• CWE-1393

No password set for administrative account in Vivotek IP7137 cameras

• Vivotek IP7137
• CWE-1393

Liferay Portal Uses Default Password

• CWE-1393

>=7.4.0, <7.4.3.112 · fixed in 7.4.3.112

Cudy WR1200EA shadow default password

• Cudy WR1200EA
• CWE-1393

NeuVector admin account has insecure default password

• CWE-1393

<0.0.0-20250825191744-da1a462074c3 · fixed in 0.0.0-20250825191744-da1a462074c3

Poly Clariti Manager - Multiple Security Vulnerabilities

• HP Inc. Poly Clariti Manager
• CWE-1393

70mai A510 Use of Default Password Authentication Bypass Vulnerability

• 70mai A510
• CWE-1393

ZKTeco BioTime default password

• ZKTeco BioTime
• CWE-1393

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0…

• Dell PowerScale OneFS
• CWE-1393

Adtran 411 ONT L80.00.0011.M2 was discovered to contain weak default passwords.

• CWE-1393

Netis WF-2404 passwd default password

• Netis WF-2404
• CWE-1393

Dell SmartFabric OS10 Software: Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x…

• Dell SmartFabric OS10 Software
• CWE-1393

IROAD Dash Cam FX2 Device Registration default password

• IROAD Dash Cam FX2
• CWE-1393

An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova.

• Percona Monitoring and Management
• CWE-1393

i-Drive i11/i12 WiFi default password

• i-Drive i11
• i-Drive i12
• CWE-1393

Hirsch Enterphone MESH: The Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH…

• Hirsch Enterphone MESH
• CWE-1393

Plaintext default credentials in firmware

• Iocharger firmware for AC models
• Hard-coded credentials
• CWE-256

Force Change of Default Credentials

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-1393

Unprotected Exposed Firebird Database with default credentials

• HASOMED Elefant
• CWE-419
• CWE-1393

Snipe-IT remote code execution

• CWE-1393

<7.0.10 · fixed in 7.0.10

An issue was discovered on Swissphone DiCal-RED 4009 devices.

• Weak cryptography or TLS
• CWE-759

Remote command execution due to use of default passwords.

• Acronis Cyber Infrastructure
• CWE-1393

An issue in Vehicle Management System 7.31.0.3_20230412 allows an attacker to escalate privileges via the login.html component.

• CWE-1393

SSRF into Sandbox Escape through Unsafe Default Configuration

• judge0
• Server-side request forgery (SSRF)
• CWE-1393

Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component.

• CWE-1393

IBM Storage Virtualize information disclosure

• IBM Storage Virtualize
• CWE-1393

An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management.

• CWE-1393

Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials

• Pegasystems Pega Platform
• CWE-1393

Pegasystems Pega Platform: Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a…

• Pegasystems Pega Platform
• CWE-1393

Use of default password vulnerability in CyberPower PowerPanel Business

• CyberPower PowerPanel Business Local / Remote
• CyberPower PowerPanel Business Management
• CWE-1393

Use of Default Password

• ABB RCCMD
• CWE-1393