Advisories · Weakness
CWE-261.
Every Advisory and CVE whose sources give the weakness CWE-261, newest first.
- CVSS 7.7 High
Weak password encoding in Płatnik
- Zakład Ubezpieczeń Społecznych Płatnik
- CWE-261
- CVSS 5.3 Medium
Improperly Stored Credentials
- Itron MV-90 xi
- CWE-257
- CWE-260
- CVSS 6.3 Medium
Dell Secure Connect Gateway (SCG) Policy Manager: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16…
- Dell Secure Connect Gateway (SCG) Policy Manager
- CWE-261
- CVSS 7.0 High
Lenovo Dock Manager: During an internal security assessment…
- Lenovo Dock Manager
- CWE-261
- CVSS 6.9 Medium
CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg
- CSL Mobile Limited CSL 1010 M2M 3G WiFi Module
- CWE-261
- CVSS 5.7 Medium
Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability.
- Dell Edge Gateway 3000
- Dell Edge Gateway 5000
- CWE-261
- CVSS 5.7 Medium
Weak password encoding in STER
- Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy STER
- CWE-261
- CVSS 8.7 High
Credentials exposure in tinycontrol devices
- tinycontrol Lan Kontroler v3.5
- tinycontrol LK3.9
- Information disclosure
- CWE-261
- CVSS 6.3 Medium
Weak KSeF token encoding in Streamsoft Prestiż
- Streamsoft Prestiż
- CWE-261
- CVSS 6.3 Medium
A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07).
- Siemens syngo.plaza VB30E
- CWE-261
- CVSS 6.1 Medium
AutomationDirect CLICK Programmable Logic Controller Weak Encoding for Password
- AutomationDirect CLICK Programmable Logic Controller
- CWE-261
- CVSS 6.9 Medium
WEEK ENCODING FOR PASSWORDS
- EFACEC QC 60/90/120
- CWE-261
- CVSS 6.3 Medium
Strapi Password Hashing is Missing Maximum Password Length Validation
- CWE-261
<5.10.3 · fixed in 5.10.3
GHSA-2cjv-6wg9-f4f3 · CVE-2025-25298 - CVSS 6.8 Medium
WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION
- SATO S86-ex 203dpi
- CWE-261
- CVSS 9.1 CriticalCritical · CVSS 9+
A logic issue was addressed with improved checks.
- Apple iOS and iPadOS
- CWE-261
- CVSS 6.5 Medium
Weak encoding for password vulnerability exists in HMI ViewJet C-more series.
- JTEKT ELECTRONICS CORPORATION HMI ViewJet C-more series
- CWE-261
- CVSS 6.9 Medium
Weak Encoding for Password vulnerability in saTECH BCU
- Arteche saTECH BCU
- CWE-261
- CVSS 8.2 High
Weak password encoding in Streamsoft Prestiż
- Streamsoft Prestiż
- CWE-261
- CVSS 8.4 High
MB connect line/Helmholz: Weak encryption of configuration file
- MB connect line mbNET.mini
- MB connect line mbNET/mbNET.rokey
- CWE-261
- CVSS 8.1 High
PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords
- PLANET Technology GS-4210-24PL4C hardware 2.0
- PLANET Technology GS-4210-24P2S hardware 3.0
- CWE-261
- CVSS 6.9 Medium
Advantech ADAM-5630 Weak Encoding for Password
- Advantech ADAM-5630
- CWE-261
- CVSS 6.8 Medium
Advantech ADAM-5550 Weak Encoding for Password
- Advantech ADAM 5550
- CWE-261
- CVSS 8.8 High
Secret encryption vulnerable to brute-force attacks
- Authenticator
- Weak cryptography or TLS
- CWE-261
- CVSS 5.5 Medium
ColdFusion | Weak Cryptography for Passwords (CWE-261)
- Adobe ColdFusion
- CWE-261
- CVSS 6.9 Medium
Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC
- Campbell Scientific CSI Web Server and RTMC
- CWE-261
- CVSS 8.1 High
An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.
- CWE-261
- CVSS 8.8 High
An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsSetFingerPrintPower f…
- Authentication bypass
- CWE-261
- CVSS 5.7 Medium
Commend WS203VICM Weak Encoding for Password
- Commend WS203VICM
- CWE-261
- CVSS 5.7 Medium
Lantronix XPort Weak Encoding for Password
- Lantronix XPort
- CWE-261
- CVSS 7.1 High
Weak Cryptography for Passwords vulnerability on WIC1200
- Full Compass Systems WIC1200
- CWE-261
- CVSS 3.3 Low
Weak encoding for password in UDS services
- JOYNEXT MIB3 Infotainment Unit
- CWE-261
- CVSS 6.8 Medium
Weak encoding vulnerability in easyE4
- Eaton easyE4
- CWE-261
- CVSS 7.5 High
Mitsubishi Electric Corporation GOT2000 Series GT27 model: Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000…
- Mitsubishi Electric Corporation GOT2000 Series GT27 model
- Mitsubishi Electric Corporation GOT2000 Series GT25 model
- CWE-261
- CVSS 5.3 Medium
AEM Weak Cryptography for Passwords Security feature bypass
- Adobe Experience Manager
- CWE-261
- CVSS 6.0 Medium
Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password.
- Dell PowerScale OneFS
- CWE-261
- CVSS 7.8 High
Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.
- Dell PowerScale OneFS
- CWE-261
- CVSS 5.7 Medium
SOCOMEC MODULYS GP: SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for…
- SOCOMEC MODULYS GP
- CWE-261
- CVSS 7.5 High
An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.
- GE Digital Proficy Historian
- CWE-261
- CVSS 2.7 Low
Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator
- nextcloud security-advisories
- CWE-261
- CVSS 7.8 High
Rockwell Automation FactoryTalk View SE: The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that…
- Rockwell Automation FactoryTalk View SE
- CWE-261
- CVSS 8.8 High
Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability.
- Dell VRTX Switch Modules
- CWE-261
- CVSS 5.5 Medium
Insecure crypto for storing passwords
- Canonical remote-login-service
- CWE-261
- CVSS 5.9 Medium
C-MORE HMI EA9: This vulnerability allows remote attackers to disclose sensitive information on affected…
- C-MORE HMI EA9
- CWE-261
- CVSS 9.8 CriticalCritical · CVSS 9+
RVD#2565: Weak token generation for the REST API.
- Mobile Industrial Robots A/S MiR100
- CWE-261
-
A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Protection Relay, firmw…
- GE Multilin SR, UR, and URplus Protective Relays
- CWE-261