CWE-1394.

About Time Technologies｜Herowatch Go - Security Misconfiguration

• About Time Technologies Herowatch Go
• CWE-1394

ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass

• xianhc ape-volo-admin
• CWE-1394

MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key

• yincongcyincong MuseBot
• CWE-1394

A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary code.

• Lenovo Idea Tab Pro (TB373FU)
• Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
• CWE-1394

BillionMail through 4.9 Forgeable JWTs via Default Signing Key

• aaPanel BillionMail
• CWE-1394

Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

• Gravitee API Management
• CWE-1394

Siemens SIMATIC IPC BX-21A: A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13)…

• Siemens SIMATIC IPC BX-21A
• Siemens SIMATIC IPC RW-543A
• CWE-1394

Express Gateway through 1.16.11 Hardcoded Default cipherKey Exposes OAuth Tokens

• ExpressGateway express-gateway
• CWE-1394

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

• CWE-1394

DTLS server cookie bypass during startup window due to empty initial cookie secret

• Erlang OTP
• CWE-1394

Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N

• TP-Link Systems Inc. TL-WL841N v13
• CWE-1394

Intel(R) Pentium(R) Processor Silver Series…: Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor…

• Intel(R) Pentium(R) Processor Silver Series, Intel(R) Celeron(R) Processor J Series, Intel(R) Celeron(R) Processor N Series may allow an escalation of privilege. Hardware reverse engineer adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via physical access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (high) and availability (none) impacts.
• CWE-1394

rachelos WeRSS we-mp-rss JWT auth.py default key

• rachelos WeRSS we-mp-rss
• CWE-1394

Fortinet FortiOS: Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in…

• Fortinet FortiOS
• CWE-1394

Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components

• Sprecher Automation SPRECON-E-C
• Sprecher Automation SPRECON-E-P
• CWE-1394

Sprecher Automation: SPRECON-E series has static default key material for TLS connections

• Sprecher Automation SPRECON-E-C
• Sprecher Automation SPRECON-E-P
• CWE-1394

Use of Default Cryptographic Key (CWE-1394)

• Baicells NEUTRINO430
• CWE-1394

RUCKUS SmartZone: RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a…

• RUCKUS SmartZone
• CWE-1394

System configuration password reset

• Milestone Systems XProtect VMS
• CWE-1394

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.

• Docusnap
• CWE-1394

Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution.

• CWE-1394

macrozheng mall JWT Token default key

• macrozheng mall
• CWE-1394

Cosmote Greece What's Up App Realm Database RealmDB.java default key

• Cosmote Greece What's Up App
• CWE-1394

Vulnerability in Baxter Welch Allyn Connex Spot Monitor

• Baxter Welch Allyn Connex Spot Monitor
• CWE-1394

Default secret use for initial deployment

• acryldata datahub-helm
• CWE-1394

Publicly Known Cryptographic Machine Key In Procura Portal Application

• AlayaCare Procura Portal
• CWE-1394