Hard-coded credentials.

Hardcoded Credentials

• Faronics WINSelect (Standard + Enterprise)
• Hard-coded credentials

H3C Magic R230 V100R002 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

Hard-coded credentials in CVE-2024-36480 Ricoh Streamline NX PC Client

• CVE-2024-36480 Ricoh Streamline NX PC Client
• Hard-coded credentials

Hard-coded password in FileCatalyst Direct 3.8.10 Build 138 TransferAgent (and earlier) and FileCatalyst Workflow 5.1.6 Build 130 (and earlier)

• Fortra FileCatalyst Direct
• Fortra FileCatalyst Workflow
• Hard-coded credentials

Insufficiently protected credentials in JetBrains YouTrack

• JetBrains YouTrack
• Hard-coded credentials

D-Link router - Hidden Backdoor

• D-Link G403
• D-Link G415
• Hard-coded credentials
• CWE-912

Shenzhen Guoxin Synthesis image system before 8.3.0 has a 123456Qw default password.

• Hard-coded credentials

HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header

• HCL Software DRYiCE Optibot Reset Station
• Weak cryptography or TLS
• Hard-coded credentials

Hardcoded credentials for WebDAV access

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

Hardcoded keys used to generate authentication cookies

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

Hardcoded credentials

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

Hardcoded password used to encrypt files

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

Hardcoded password used to encrypt logs and use of weak cipher

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

Hardcoded password used to encrypt logs

• Toshiba Tec Corporation Toshiba Tec e-Studio multi-function peripheral (MFP)
• Hard-coded credentials

TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

• Hard-coded credentials

Hardcoded credentials in TerraMaster TOS firmware through 5.1 allow a remote attacker to successfully login to the mail or webmail server.

• Hard-coded credentials

Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

• Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
• Hard-coded credentials

Insufficiently Protected Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

• Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
• Hard-coded credentials

Use of Hard-coded Credentials in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

• Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)
• Hard-coded credentials

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root.

• Hard-coded credentials

Hard-coded credentials in Schneider Electric EcoStruxure IT Gateway

• Schneider Electric EcoStruxure IT Gateway
• Hard-coded credentials

Hard-coded password in Hitachi Energy FOXMAN-UN and others

• Hitachi Energy FOXMAN-UN
• Hitachi Energy UNEM
• Hard-coded credentials

Insufficiently protected credentials in Siemens SINEC Traffic Analyzer

• Siemens SINEC Traffic Analyzer
• Hard-coded credentials

Hard-coded credentials in Veeam Recovery Orchestrator

• Veeam Recovery Orchestrator
• Hard-coded credentials

An issue was discovered in Kape CyberGhostVPN 8.4.3.12823 on Windows.

• Hard-coded credentials

Docker CLI leaks private registry credentials to registry-1.docker.io

• Information disclosure
• Hard-coded credentials

<20.10.9 · fixed in 20.10.9

Insufficiently protected credentials in JetBrains IntelliJ IDEA and others

• JetBrains IntelliJ IDEA
• JetBrains Aqua
• Hard-coded credentials

Hardcoded password in Estomed Sp. z o.o. Simple Care software

• Estomed Sp. z o.o. Simple Care
• Hard-coded credentials

Hardcoded password in drEryk Gabinet

• drEryk sp. z o.o. drEryk Gabinet
• Hard-coded credentials

Hardcoded password in Eurosoft Przychodnia

• EuroSoft Sp. z o. o. Eurosoft Przychodnia
• Hard-coded credentials

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards.

• Hard-coded credentials

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file.

• Hard-coded credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd.

• Hard-coded credentials

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key.

• Hard-coded credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and access the service menu, because there is a hard-coded servi…

• Hard-coded credentials

Authentication bypass in dtale

• Hard-coded credentials
• CWE-20

<=3.10.0 · no fixed version yet

Password hash exposed in CraftCMS two factor authentication plugin

• Information disclosure
• Hard-coded credentials

>=3.3.1, <3.3.4 · fixed in 3.3.4

apko Exposure of HTTP basic auth credentials in log output

• Hard-coded credentials
• Information disclosure

<0.14.5 · fixed in 0.14.5

Hard-coded credentials in Dell PowerScale OneFS

• Dell PowerScale OneFS
• Hard-coded credentials

TOTOLINK CP300 V2.0.4-B20201102 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

• Hard-coded credentials

Vulnerability in Welch Allyn Configuration Tool Software

• Baxter Welch Allyn Configuration Tool
• Hard-coded credentials

LenelS2 NetBox Hardcoded Credentials

• LenelS2 NetBox
• Hard-coded credentials

MinMax CMS - Hidden Functionality

• MinMax Digital Technology MinMax CMS
• Hard-coded credentials
• CWE-912

SimpleSAMLphp exposes credentials in session storage

• Hard-coded credentials

>=1.16.0, <1.16.3 · fixed in 1.16.3

Certain Anpviz products contain a hardcoded cryptographic key stored in the firmware of the device.

• Hard-coded credentials

ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.

• Hard-coded credentials
• CWE-657

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted conne…

• Hard-coded credentials

TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.

• Hard-coded credentials

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

• D-Link D-View
• Hard-coded credentials

Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials

• wpfeedback Atarim – Visual Feedback, Review & AI Collaboration
• Hard-coded credentials

Hard-coded credentials in i-plug inc. 'OfferBox' App for Android and others

• i-plug inc. 'OfferBox' App for Android
• i-plug inc. 'OfferBox' App for iOS
• Hard-coded credentials

Trivy possibly leaks registry credential when scanning images from malicious registries

• Hard-coded credentials

<0.51.2 · fixed in 0.51.2

Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a cleartext password.

• Hard-coded credentials
• CWE-256

HCL BigFix Platform is susceptible to insufficiently protected credentials

• HCL Software BigFix Platform
• Hard-coded credentials

Hard-coded credentials in Trellix ePolicy Orchestrator

• Trellix ePolicy Orchestrator
• Hard-coded credentials

CyberPower PowerPanel business Use of Hard-coded Cryptographic Key

• CyberPower PowerPanel business
• Hard-coded credentials

CyberPower PowerPanel business Use of Hard-coded Credentials

• CyberPower PowerPanel business
• Hard-coded credentials

CyberPower PowerPanel business Use of Hard-coded Password

• CyberPower PowerPanel business
• Hard-coded credentials

CyberPower PowerPanel business Use of Hard-coded Password

• CyberPower PowerPanel business
• Hard-coded credentials

Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins

• Information disclosure
• Hard-coded credentials

>=7.0.0, <8.5.14 || >=9.0.0, <9.1.8 · fixed in 8.5.14, 9.1.8