Hard-coded credentials.

Insufficiently protected credentials in Hewlett Packard Enterprise HPE OneView

• Hewlett Packard Enterprise HPE OneView
• Hard-coded credentials

Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.

• Hard-coded credentials

Duplicate Advisory: Hard-coded credentials in org.folio:mod-data-export-spring

• Hard-coded credentials

<1.5.4 || >=2.0.0, <3.0.0 · fixed in 1.5.4, 3.0.0

Duplicate Advisory: Hard-coded credentials in org.folio:mod-remote-storage

• Hard-coded credentials

>=2.0.0, <2.0.3 || <1.7.2 · fixed in 2.0.3, 1.7.2

EverShop at risk to unauthorized access via weak HMAC secret

• Broken access control
• Hard-coded credentials

<1.0.0-rc.9 · fixed in 1.0.0-rc.9

Hard-coded password for UDS services

• JOYNEXT MIB3 Infotainment Unit
• Hard-coded credentials

Predictable encryption passphrase used in publicly accessible configuration file

• Hongdian H8951-4G-ESP
• Hard-coded credentials

Predefined root password

• Hongdian H8951-4G-ESP
• Hard-coded credentials

A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed state.

• Hard-coded credentials

Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials.

• Hard-coded credentials

Insufficiently Protected Credentials in PTC's Kepware KEPServerEX

• PTC Kepware KEPServerEX
• PTC ThingWorx Kepware Server
• Hard-coded credentials

Weak credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others

• Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
• Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
• Hard-coded credentials

Hard-coded credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others

• Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
• Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
• Hard-coded credentials

Hard-coded credentials in Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) and others

• Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
• Rexroth Nexo cordless nutrunner NXA030S-36V (0608842002)
• Hard-coded credentials

SourceCodester Engineers Online Portal signup_teacher.php weak password

• SourceCodester Engineers Online Portal
• Hard-coded credentials

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local sys...

• Hard-coded credentials

<3.0.0 · fixed in 3.0.0

In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios) because of a non-unique initial system user password.

• Hard-coded credentials

IBM Storage Fusion HCI information disclosure

• IBM Storage Fusion HCI
• Hard-coded credentials

An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive information because there is an automaticsystems super admin account with astech as its…

• Hard-coded credentials

Predictable SSH credentials in Priva TopControl Suite

• Priva TopControl Suite - Bacnet
• Priva TopControl Suite - Blue ID
• Hard-coded credentials

RRJ Nueva Ecija Engineer Online Portal change_password_teacher.php weak password

• RRJ Nueva Ecija Engineer Online Portal
• Hard-coded credentials

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authentication bypass.

• Hard-coded credentials

PHPGurukul Online Notes Sharing System signup.php weak password

• PHPGurukul Online Notes Sharing System
• Hard-coded credentials

IBM Security Guardium Key Lifecycle Manager information disclosure

• IBM Security Guardium Key Lifecycle Manager
• Hard-coded credentials

Hard-coded credentials in Paxton Net2

• Paxton Net2
• Hard-coded credentials

Kaifa Technology WebITR - Hard-coded Cryptographic Key

• Kaifa Technology WebITR
• Hard-coded credentials

Multisuns EasyLog web+ - Use of Hard-coded Password

• Multisuns EasyLog web+
• Hard-coded credentials

SmartStar Software CWS Web-Base - Use of Hard-coded Credentials

• SmartStar Software CWS Web-Base
• Hard-coded credentials

Hard-coded credentials in Zoom Video Communications, Inc. Zoom Mobile App for Android…

• Zoom Video Communications, Inc. Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDK
• Hard-coded credentials

Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin

• Information disclosure
• Hard-coded credentials

<4.229.vf736b · fixed in 4.229.vf736b

SENEC: Storage Box V1,V2 and V3 using default credentials

• SENEC Storage Box V1
• SENEC Storage Box V2
• Hard-coded credentials

NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.

• Hard-coded credentials

Administrator equivalent Filr user can access proxy administrator credentials

• OpenText Filr
• Hard-coded credentials

Data leak of password hash through change requests

• Hard-coded credentials

>=0.1, <1.10 · fixed in 1.10

Use of hardcoded certificate and private key

• SierraWireless ALEOS
• Hard-coded credentials

Use of Hard-Coded Credentials

• SierraWireless ALEOS
• Hard-coded credentials

Hard-coded password for access to power controller chip memory

• JOYNEXT MIB3 Infotainment Unit
• Hard-coded credentials

Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials

• Hard-coded credentials

<3.12 · fixed in 3.12

Hardcoded Secrets

• Becton, Dickinson and Company (BD) FACSChorus
• Hard-coded credentials

Password is send back to client

• OTRS
• Hard-coded credentials

PowerShell Information Disclosure Vulnerability

• Microsoft PowerShell 7.2
• Microsoft PowerShell 7.3
• Hard-coded credentials

Hard-coded credentials in Dell Mobility - E-Lab Navigator

• Dell Mobility - E-Lab Navigator
• Hard-coded credentials

Hard-coded credentials in First Co., Ltd. CFR-904E, CFR-908E, CFR-916E and others

• First Co., Ltd. CFR-904E, CFR-908E, CFR-916E
• First Co., Ltd. CFR-4EHD, CFR-8EHD, CFR-16EHD
• Hard-coded credentials

Hard-coded credentials in Fortinet FortiAnalyzer and others

• Fortinet FortiAnalyzer
• Fortinet FortiManager
• Hard-coded credentials

Hard-coded credentials in Fortinet FortiClientWindows

• Fortinet FortiClientWindows
• Hard-coded credentials

Hard-coded cryptographic key in Siemens RUGGEDCOM RM1224 LTE(4G) EU and others

• Siemens RUGGEDCOM RM1224 LTE(4G) EU
• Siemens RUGGEDCOM RM1224 LTE(4G) NAM
• Hard-coded credentials

Hard-coded cryptographic key in AppsAnywhere Client

• AppsAnywhere Client
• Hard-coded credentials

TIBCO Spotfire Insufficiently Protected Credential vulnerability

• TIBCO Software Inc. Spotfire Analyst
• TIBCO Software Inc. Spotfire Server
• Hard-coded credentials

An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.

• Hard-coded credentials

Insufficiently protected credentials in Veeam One

• Veeam One
• Hard-coded credentials

Weintek EasyBuilder Pro Use of Hard-coded Credentials

• Weintek EasyBuilder Pro
• Hard-coded credentials

Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements

• Chunghwa Telecom NOKIA G-040W-Q
• Hard-coded credentials

Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key

• Hard-coded credentials

<3.8.1 · fixed in 3.8.1

xkeys seal encryption used fixed key for all encryption

• Hard-coded credentials
• CWE-325

>=2.10.0, <2.10.4 · fixed in 2.10.4

Jenkins Warnings Plugin exposures system-scoped credentials

• Information disclosure
• Hard-coded credentials

>=10.5.0, <10.5.1 || <10.4.1 · fixed in 10.5.1, 10.4.1

Sureness uses hardcoded key

• Hard-coded credentials

<1.0.8 · fixed in 1.0.8

EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key

• EisBaer Scada v3.0.6433.1964
• Hard-coded credentials

Hard-coded credentials in Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2107) and others

• Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2107)
• Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2110)
• Hard-coded credentials

Hard-coded credentials in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others

• Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
• Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
• Hard-coded credentials

Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecified vectors.

• Hard-coded credentials