Hard-coded credentials.

VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder

• Hard-coded credentials

<0.1.38 · fixed in 0.1.38

Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx

• SICK AG SICK CLV6xx
• SICK AG SICK Lector6xx
• Hard-coded credentials

Tenda G3 v15.01.0.5(2848_755)_EN was discovered to contain a hardcoded password vulnerability in /etc_ro/shadow, which allows attackers to log in as root

• Hard-coded credentials

Cisco UCS Central Software Configuration Backup Static Key Vulnerability

• Cisco Unified Computing System Central Software
• Hard-coded credentials

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

• MB connect line mbNET.mini
• Helmholz REX100
• Hard-coded credentials

MB connect line/Helmholz: Generation of weak passwords vulnerability

• MB connect line mbCONNECT24
• MB connect line mymbCONNECT24
• Hard-coded credentials

JUJU_CONTEXT_ID is a predictable authentication secret in github.com/juju/juju

• Hard-coded credentials
• CWE-337

<0.0.0-20240826044107-ecd7e2d0e986 · fixed in 0.0.0-20240826044107-ecd7e2d0e986

Password policy for new users is not strong enough

• Progress Software Corporation Telerik Report Server
• Hard-coded credentials

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard.

• Hard-coded credentials

Insufficiently protected credentials in JetBrains TeamCity

• JetBrains TeamCity
• Hard-coded credentials

Firmware extraction and Hardware SSL Pinning Bypass

• eWeLink Zigbee Bridge Pro
• Weak cryptography or TLS
• Hard-coded credentials

Weak credentials in Rocket.Chat Mobile

• Rocket.Chat Mobile
• Hard-coded credentials

OpenC3 stores passwords in clear text (`GHSL-2024-129`)

• Information disclosure
• Hard-coded credentials

<5.19.0 · fixed in 5.19.0

Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission

• Information disclosure
• Hard-coded credentials

>=1372, <1381.v2c3a || <1371.1373.v4eb · fixed in 1381.v2c3a, 1371.1373.v4eb

Duplicate Advisory: Juju makes Use of Weak Credentials

• Weak cryptography or TLS
• Hard-coded credentials

<0.0.0-20241001032836-2af7bd8e310b · fixed in 0.0.0-20241001032836-2af7bd8e310b

PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string

• PLANET Technology GS-4210-24PL4C hardware 2.0
• PLANET Technology GS-4210-24P2S hardware 3.0
• Hard-coded credentials

PLANET Technology switch devices - Local users' passwords recovery through hard-coded credentials

• PLANET Technology GS-4210-24PL4C hardware 2.0
• PLANET Technology GS-4210-24P2S hardware 3.0
• Hard-coded credentials

PLANET Technology switch devices - Remote privilege escalation using hard-coded credentials

• PLANET Technology GS-4210-24PL4C hardware 2.0
• PLANET Technology GS-4210-24P2S hardware 3.0
• Hard-coded credentials

An issue was discovered in Infinera hiT 7300 5.60.50.

• Hard-coded credentials

An issue was discovered in Infinera hiT 7300 5.60.50.

• Information disclosure
• Hard-coded credentials

Autel MaxiCharger AC Elite Business C50 BLE Hardcoded Credentials Authentication Bypass Vulnerability

• Autel MaxiCharger AC Elite Business C50
• Hard-coded credentials

Dragonfly2 has hard coded cyptographic key in d7y.io/dragonfly

• Hard-coded credentials

<2.1.0-beta.1 · fixed in 2.1.0-beta.1

Weak Passwords Requirements in goTenna Pro

• goTenna Pro
• Hard-coded credentials

goTenna Pro ATAK Plugin Weak Password Requirements

• goTenna Pro ATAK Plugin
• Hard-coded credentials

VONETS VAP11G-300 v3.3.23.6.9 was discovered to contain hardcoded credentials for several different privileged accounts, including root.

• Hard-coded credentials

Cisco Catalyst Center Static SSH Host Key Vulnerability

• Cisco Digital Network Architecture Center (DNA Center)
• Hard-coded credentials

Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE Use of Hard-coded Password

• Dover Fueling Solutions (DFS) ProGauge MAGLINK LX CONSOLE
• Dover Fueling Solutions (DFS) ProGauge MAGLINK LX4 CONSOLE
• Hard-coded credentials

IceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forge JWT authentication information.

• Hard-coded credentials

OAuth2 client ID and secret exposed through the web browser

• Hard-coded credentials

<8.12 · fixed in 8.12

IBM Cognos Analytics information disclosure

• IBM Cognos Analytics
• IBM Cognos Analytics Reports
• Hard-coded credentials

CheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.

• Hard-coded credentials

Insufficiently protected credentials in JetBrains YouTrack

• JetBrains YouTrack
• Hard-coded credentials

Use of Hard-coded Credentials in Kastle Systems Access Control System

• Kastle Systems Access Control System
• Hard-coded credentials

Grafana plugin SDK Information Leakage

• Hard-coded credentials

<0.250.0 · fixed in 0.250.0

runofast Indoor Security Camera for Baby Monitor has a default password of password for the root account.

• Hard-coded credentials

Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card.

• Hard-coded credentials

Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data.

• Hard-coded credentials

Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext.

• Hard-coded credentials
• CWE-256

Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software

• TNB Mobile Solutions Cockpit Software
• Hard-coded credentials

SolarWinds Access Rights Manager (ARM) Hardcoded Credentials Authentication Bypass Vulnerability

• SolarWinds Access Rights Manager
• Hard-coded credentials

Possible Improper authentication Vulnerability in OpenText eDirectory

• OpenText eDirectory
• Hard-coded credentials

Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials

• Hitachi Vantara Pentaho Data Integration & Analytics
• Hard-coded credentials

Hard-coded credentials in Dell PowerScale InsightIQ

• Dell PowerScale InsightIQ
• Hard-coded credentials

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

• Hard-coded credentials

TOTOLINK AC1200 T8 shadow.sample hard-coded password

• TOTOLINK AC1200 T8
• Hard-coded credentials

Insufficiently protected credentials in Veeam Backup and Recovery

• Veeam Backup and Recovery
• Hard-coded credentials

Hard-coded password in Dell SmartFabric OS10 Software

• Dell SmartFabric OS10 Software
• Hard-coded credentials

Hughes Network Systems Insufficiently Protected Credentials

• Hughes Network Systems WL3000 Fusion Software
• Hard-coded credentials

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserv…

• Hard-coded credentials

IBM MaaS360 information disclosure

• IBM MaaS360
• Hard-coded credentials

Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier)

• Fortra FileCatalyst Workflow
• Information disclosure
• Hard-coded credentials

A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges

• Hard-coded credentials

TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials

• TOTOLINK T10 AC1200
• Hard-coded credentials

Go-Tribe gotribe token.go Sign hard-coded credentials

• Go-Tribe gotribe
• Hard-coded credentials

Avtec Outpost Use of Hard-coded Cryptographic Key

• Avtec Outpost 0810
• Avtec Outpost Uploader Utility
• Hard-coded credentials

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12.

• Hard-coded credentials

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

• SolarWinds Web Help Desk
• Hard-coded credentials

Hard coded cryptographic key in Kiali in github.com/kiali/kiali

• Hard-coded credentials

<1.15.1 · fixed in 1.15.1

Use of Hard-coded Cryptographic Key in Netmaker in github.com/gravitl/netmaker

• Hard-coded credentials

<0.8.5 || >=0.9.0, <0.9.4 · fixed in 0.8.5, 0.9.4

Answer has Weak Password Requirements in github.com/answerdev/answer

• Hard-coded credentials

<1.1.0 · fixed in 1.1.0