Hard-coded credentials.

Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

• eCharge Hardy Barth cPH2 / cPP2 charging stations
• Hard-coded credentials

Hard-coded cryptographic key in itech iLabClient

• itech iLabClient
• Hard-coded credentials

Insufficiently protected credentials in Canon Inc. imageRUNNER Series and others

• Canon Inc. imageRUNNER Series
• Canon Inc. imageCLASS Series
• Hard-coded credentials

Insufficiently protected credentials in Canon Inc. imageRUNNER ADVANCE Series and others

• Canon Inc. imageRUNNER ADVANCE Series
• Canon Inc. imageRUNNER Series
• Hard-coded credentials

Hardcoded Key Revealed in ConnectWise Password Encryption Utility

• ConnectWise Risk Assessment
• Hard-coded credentials

Insufficiently protected credentials in Synology Active Backup for Microsoft 365

• Synology Active Backup for Microsoft 365
• Hard-coded credentials

Microsoft Windows Hardware Lab Kit (HLK) Elevation of Privilege Vulnerability

• Microsoft Windows 10 HLK version 20H2
• Microsoft Windows 10 HLK version 21H1
• Hard-coded credentials

Hard-coded cryptographic key in ZKTeco ZKBio CVSecurity

• ZKTeco ZKBio CVSecurity
• Hard-coded credentials

Improper Access Control

• Schweitzer Engineering Laboratories SEL Blueframe OS
• Hard-coded credentials

SunGrow Logger1000 weak password

• SunGrow Logger1000
• Hard-coded credentials

IBM App Connect Enterprise Certified Container information disclosure

• IBM App Connect Enterprise Certified Container
• Hard-coded credentials

Victure RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which includes the last 8 digits of the Mac address.

• Hard-coded credentials

Hard-coded credentials in TeleMessage archiving backend

• TeleMessage archiving backend
• Hard-coded credentials

An issue was discovered in Znuny before 7.1.5.

• Hard-coded credentials

Hard-coded credentials in Cisco IOS XE Software

• Cisco IOS XE Software
• Hard-coded credentials

phpgt/Dom exposes the GITHUB_TOKEN in Dom workflow run artifact

• phpgt Dom
• Information disclosure
• Hard-coded credentials

Use of Hard-coded Credentials Optigo Networks ONS NC600

• Optigo Networks ONS NC600
• Hard-coded credentials

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default

• SRI Mojolicious
• Hard-coded credentials
• CWE-331

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

• Hard-coded credentials

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

• Hard-coded credentials

Ribbon Communications - CWE-798: Use of Hard-coded Credentials

• Ribbon Communications Apollo 9608
• Hard-coded credentials

Reuse of salt

• SICK AG SICK FLX3-CPUC200
• SICK AG TDC-X401GL
• Hard-coded credentials

Hard-coded credentials in Quantum StorNext

• Quantum StorNext
• Hard-coded credentials

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.

• Hard-coded credentials

Planet Technology Network Products Use of Hard-coded Credentials

• Planet Technology UNI-NMS-Lite
• Hard-coded credentials

Planet Technology Network Products Use of Hard-coded Credentials

• Planet Technology UNI-NMS-Lite
• Hard-coded credentials

Hard-coded cryptographic key in i-PRO Co., Ltd. i-PRO Configuration Tool

• i-PRO Co., Ltd. i-PRO Configuration Tool
• Hard-coded credentials

BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability

• BEC Technologies Multiple Routers
• Hard-coded credentials

CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability

• CarlinKit CPC200-CCPA
• Hard-coded credentials

Dpanel's hard-coded JWT secret leads to remote code execution in github.com/donknap/dpanel

• Hard-coded credentials
• CWE-453

<1.6.1 · fixed in 1.6.1

TOTOLINK A810R V4.1.2cu.5182_B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini.

• Hard-coded credentials

Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS

• Hard-coded credentials

<7.1.0 · fixed in 7.1.0

Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.

• Hard-coded credentials

A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plai…

• Hard-coded credentials

An issue in Macro-video Technologies Co.,Ltd V380E6_C1 IP camera (Hw_HsAKPIQp_WF_XHR) 1020302 allows a physically proximate attacker to execute arbitrary code via UART component.

• Hard-coded credentials

IBM Aspera Console weak password requirements

• IBM Aspera Console
• Hard-coded credentials

Insecure password storage in SicommNet BASEC

• SicommNet BASEC
• Hard-coded credentials

Hard-coded cryptographic key in OPEN, Inc. BizRobo!

• OPEN, Inc. BizRobo!
• Hard-coded credentials

Magento does not properly protect credentials

• Hard-coded credentials

<2.4.4-p13 || >=2.4.5-p1, <2.4.5-p12 || >=2.4.6-p1, <2.4.6-p10 || >=2.4.7-beta1, <2.4.7-p5 || >=2.4.8-beta1, <2.4.8-beta2 · fixed in 2.4.4-p13, 2.4.5-p12, 2.4.6-p10, 2.4.7-p5, 2.4.8-beta2

Azure Local Cluster Information Disclosure Vulnerability

• Microsoft Azure Local Cluster
• Hard-coded credentials

Hard-coded credentials in Siemens SENTRON 7KT PAC1260 Data Manager

• Siemens SENTRON 7KT PAC1260 Data Manager
• Hard-coded credentials

Use of default hardcoded credentials

• Philips IntelliSpace Portal
• Philips Advanced Visualization Workspace
• Hard-coded credentials

FastCMS JWT hard-coded key

• FastCMS
• Hard-coded credentials
• CWE-320

Hard-coded cryptographic key in Gladinet CentreStack

• Gladinet CentreStack
• Hard-coded credentials

Hard-coded password for object store of KNIME Business Hub

• KNIME Business Hub
• Hard-coded credentials

Weak password requirements in Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)

• Inaba Denki Sangyo Co., Ltd. CHOCO TEI WATCHER mini (IB-MCT001)
• Hard-coded credentials

Hard-coded cryptographic key in VyOS

• VyOS
• Hard-coded credentials

Insufficiently Protected Credentials vulnerability in MeetMe products

• Fermax MeetMe
• Hard-coded credentials

An issue was discovered on the Audi Universal Traffic Recorder 2.88.

• Hard-coded credentials

BUG-000174336

• Esri Portal for ArcGIS
• Hard-coded credentials

Audi UTR Dashcam Video Stream hard-coded credentials

• Audi UTR Dashcam
• Hard-coded credentials

Audi Universal Traffic Recorder App FTP Credentials hard-coded password

• Audi Universal Traffic Recorder App
• Hard-coded credentials
• CWE-255

Authentication Bypass in Sechard Information Technologies' SecHard

• SecHard
• Weak cryptography or TLS
• Hard-coded credentials

In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be suscep...

• Hard-coded credentials

<2.19.0 · fixed in 2.19.0

Spring Security Does Not Enforce Password Length

• Authentication bypass
• Hard-coded credentials

>=6.3.0, <6.3.8 || >=6.4.0, <6.4.4 || >=6.2.0, <6.2.10 || >=6.1.0, <6.1.14 || >=6.0.0, <6.0.16 || >=5.8.0, <5.8.18 || <5.7.16 · fixed in 6.3.8, 6.4.4, 6.2.10, 6.1.14, 6.0.16, 5.8.18, 5.7.16

Jenkins Zoho QEngine Plugin Displays Unmasked API Keys

• Hard-coded credentials
• CWE-549

<1.0.31.v4a_b_1db_6d6a_f2 · fixed in 1.0.31.v4a_b_1db_6d6a_f2

Hard-coded cryptographic key in MNX SmartOS

• MNX SmartOS
• Hard-coded credentials

An issue was discovered in the G-Net GNET APK 2.6.2.

• Hard-coded credentials

An issue was discovered on ROADCAM X3 devices.

• Hard-coded credentials

An issue was discovered on ROADCAM X3 devices.

• Hard-coded credentials