Hard-coded credentials.

Insufficiently protected credentials in GE HealthCare EchoPAC products

• GE HealthCare EchoPAC Software Only
• GE HealthCare ImageVault
• Hard-coded credentials

Weak account password in GE HealthCare EchoPAC products

• GE HealthCare EchoPAC Software Only
• GE HealthCare ImageVault
• Hard-coded credentials

An issue was discovered in linqi before 1.4.0.1 on Windows.

• Hard-coded credentials

Insufficiently protected credentials in Siemens SIMATIC RTLS Locating Manager

• Siemens SIMATIC RTLS Locating Manager
• Hard-coded credentials

Insufficiently protected credentials in Siemens SIMATIC RTLS Locating Manager

• Siemens SIMATIC RTLS Locating Manager
• Hard-coded credentials

Hard-coded password in Siemens SIMATIC CN 4100

• Siemens SIMATIC CN 4100
• Hard-coded credentials

Hard-coded credentials in Siemens SIMATIC CN 4100

• Siemens SIMATIC CN 4100
• Hard-coded credentials

Hard-coded cryptographic key in Siemens SIMATIC RTLS Locating Manager

• Siemens SIMATIC RTLS Locating Manager
• Hard-coded credentials

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample.

• Hard-coded credentials

Improper authentication in YMS VIS Pro

• YMS VIS Pro
• Authentication bypass
• Hard-coded credentials

IBM TXSeries for Multiplatforms information disclosure

• IBM TXSeries for Multiplatforms
• Hard-coded credentials

Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface (ARI), which allows remote attackers to reconfigure Asterisk and make external and internal c…

• Hard-coded credentials

TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

• Hard-coded credentials

TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allows attackers to log in through telnet.

• Hard-coded credentials

SolarWinds Access Rights Manager (ARM) Hard-Coded Credentials Authentication Bypass Vulnerability

• SolarWinds Access Rights Manager
• Hard-coded credentials

VMware Avi Load Balancer updates address multiple vulnerabilities

• VMware Avi Load Balancer
• Hard-coded credentials

HCL BigFix Compliance is potentially affected by Oracle database credentials stored at endpoint

• HCL Software BigFix Compliance
• Hard-coded credentials

Weak password requirements in Ubiquiti Inc Update UniFi Connect EV Station and others

• Ubiquiti Inc Update UniFi Connect EV Station
• Ubiquiti Inc Update UniFi Connect EV Station Pro
• Hard-coded credentials

Eclipse Dataspace Components vulnerable to OAuth2 client secret disclosure

• Information disclosure
• Hard-coded credentials

>=0.2.1, <0.6.3 · fixed in 0.6.3

Credential Cloning

• Integrated Control Technology TSEC
• Hard-coded credentials

Hard-coded cryptographic key in Motorola Phones

• Motorola Phones
• Hard-coded credentials

D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability

• D-Link DCS-8300LHV2
• Hard-coded credentials

Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability

• Voltronic Power ViewPower Pro
• Hard-coded credentials

D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability

• D-Link D-View
• Hard-coded credentials

Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability

• Softing Secure Integration Server
• Hard-coded credentials

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability

• Triangle MicroWorks SCADA Data Gateway
• Hard-coded credentials

Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability

• Triangle MicroWorks SCADA Data Gateway
• Hard-coded credentials

D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability

• D-Link DAP-2622
• Hard-coded credentials

NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability

• NETGEAR RAX30
• Hard-coded credentials

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

• D-Link D-View
• Hard-coded credentials

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability

• D-Link DAP-1360
• Hard-coded credentials

Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext

• Hard-coded credentials

<=1.4.0 · no fixed version yet

LoadMaster Hardcoded SSH Key

• Progress Software Corporation LoadMaster
• Hard-coded credentials

Hard-coded password in SonicWall GMS

• SonicWall GMS
• Hard-coded credentials

The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords.

• Hard-coded credentials

The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords by default for forms and SQL connections.

• Hard-coded credentials

HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.…

• Hard-coded credentials

SimpleMiningOS through v1259 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.i…

• Hard-coded credentials

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

• Hard-coded credentials

In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username variable is accidentally given a password value.

• Hard-coded credentials

Delinea Secret Server before 11.7.000001 allows attackers to bypass authentication via the SOAP API in SecretServer/webservices/SSWebService.asmx.

• Hard-coded credentials

Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings.

• Hard-coded credentials
• CWE-256

H3C ER8300G2-X is vulnerable to Incorrect Access Control.

• Hard-coded credentials

An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to overwrite the hardcoded IP address in the device memory, disrupting network connectivity between the router and…

• Hard-coded credentials

IBM Aspera Faspex privilege escalation

• IBM Aspera Faspex
• Hard-coded credentials

hard-coded credentials in the documentation that appear as the appliance root password

• Brocade SANnav
• Hard-coded credentials

Brocade SANnav contains hardcoded TLS keys used by Docker

• Brocade SANnav
• Hard-coded credentials

Identical SSH keys utilized inside the OVA image (CVE-2024-29960)

• Brocade SANnav
• Hard-coded credentials

DYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could allow an attacker to take control.

• Hard-coded credentials

Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility

• NetApp ONTAP Select Deploy administration utility
• Hard-coded credentials

Smart Office Main.aspx weak password

• Smart Office
• Hard-coded credentials

[Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks

• Juniper Networks, Inc. cRPD
• Juniper Networks, Inc. Juniper Cloud Native Router (JCNR)
• Hard-coded credentials

IBM Security Verify Access Appliance information disclosure

• IBM Security Verify Access Appliance
• Hard-coded credentials

Azure Identity Library for .NET Information Disclosure Vulnerability

• Hard-coded credentials

<1.11.0 · fixed in 1.11.0

Azure AI Search Information Disclosure Vulnerability

• Microsoft Azure AI Search
• Hard-coded credentials

Insufficiently protected credentials in Fortinet FortiOS and others

• Fortinet FortiOS
• Fortinet FortiProxy
• Hard-coded credentials

In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).

• Hard-coded credentials

Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information.

• Hard-coded credentials

D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

• D-Link DNS-320L
• D-Link DNS-325
• Hard-coded credentials

Insecure Data Storage leading to sensitive Information disclosure.

• CoolKIt eWeLink APP
• Hard-coded credentials