Hard-coded credentials.

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default at boot via the initialization script /etc/init.d/eth.sh.

• Hard-coded credentials

ColdFusion | Use of Hard-coded Credentials (CWE-798)

• Adobe ColdFusion
• Hard-coded credentials

Hardcoded Credential Exposure Allows Unauthorized Access in Web Interface

• Hewlett Packard Enterprise (HPE) HPE Networking Instant On
• Hard-coded credentials

Hard-coded Password in SUR-FBD CMMS

• SUR-FBD CMMS
• Hard-coded credentials

Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

• Broadcom Symantec IT Management Suite
• Hard-coded credentials

A vulnerability has been discovered in the firmware of Paxton Paxton10 before 4.6 SR6.

• Hard-coded credentials

Done-0 Jank JWT Token jwt_utils.go hard-coded password

• Done-0 Jank
• Hard-coded credentials
• CWE-255

mao888 bluebell-plus JWT Token jwt.go hard-coded password

• mao888 bluebell-plus
• Hard-coded credentials
• CWE-255

Hard Coded Key used for AES encryption

• ABB RMC-100
• ABB RMC-100 LITE
• Hard-coded credentials

Authentication Bypass to the MQTT configuration Web Interface

• ABB RMC-100
• ABB RMC-100 LITE
• Hard-coded credentials

NSClient++ 0.5.2.35 Local Privilege Escalation via ExternalScripts and Web Interface

• NSClient++
• Hard-coded credentials

Cisco Unified Communications Manager Static SSH Credentials Vulnerability

• Cisco Unified Communications Manager
• Hard-coded credentials

ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.

• Hard-coded credentials

OneLogin AD Connector API Credential and Signing Key Exposure

• One Identity OneLogin Active Directory Connector (ADC)
• Information disclosure
• Hard-coded credentials

Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read

• Hangzhou Hikvision System Technology Streaming Media Management Server
• Path traversal
• Hard-coded credentials

Pass-back attack in Konica Minolta bizhub 227 multifunctional printers

• Konica Minolta bizhub 227 Multifunction printers
• Hard-coded credentials

D-Link DCS-7517 Qlync Password Generation httpd g_F_n_GenPassForQlync hard-coded password

• D-Link DCS-7517
• Hard-coded credentials
• CWE-255

File Browser vulnerable to insecure password handling

• Authentication bypass
• Hard-coded credentials

<=1.11.0 · no fixed version yet

tiny-secp256k1 vulnerable to private key extraction when signing a malicious JSON-stringifyable message in bundled environment

• Hard-coded credentials

<1.1.7 · fixed in 1.1.7

Hard-coded password in Flock Safety License Plate Reader

• Flock Safety License Plate Reader
• Hard-coded credentials

Hard-coded password in Flock Safety Gunshot Detection devices

• Flock Safety Gunshot Detection devices
• Hard-coded credentials

Hard-coded password in Flock Safety Gunshot Detection devices

• Flock Safety Gunshot Detection devices
• Hard-coded credentials

gooaclok819 sublinkX jwt.go hard-coded key

• gooaclok819 sublinkX
• Hard-coded credentials
• CWE-320

Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolt…

• Brother Industries, Ltd HL-L8260CDN
• Brother Industries, Ltd HL-L8260CDW
• Hard-coded credentials

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

• Brother Industries, Ltd DCP-J928N-W/B
• Brother Industries, Ltd MFC-J1800DW (Europe)
• Hard-coded credentials

Hardcoded Credentials in Ataturk University's ATA-AOF Mobile Application

• Ataturk University ATA-AOF Mobile Application
• Weak cryptography or TLS
• Hard-coded credentials

5VTechnologies Blue Angel Software Suite Hardcoded Credentials

• 5VTechnologies Blue Angel Software Suite
• Hard-coded credentials

70mai M300 HTTP Server insufficiently protected credentials

• 70mai M300
• Hard-coded credentials

D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive user credentials.

• Hard-coded credentials

Sitecore XM and XP Hardcoded Credentials

• Sitecore Experience Manager
• Sitecore Experience Platform
• Hard-coded credentials

TOTOLINK T10 shadow.sample hard-coded password

• TOTOLINK T10
• Hard-coded credentials
• CWE-255

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack.

• Hard-coded credentials

<=6.0.0 · no fixed version yet

OpenC3 COSMOS before v6.0.2 was discovered to contain hardcoded credentials for the Service Account.

• Hard-coded credentials

<=6.0.0 · no fixed version yet

mySCADA PRO Manager Password Disclosure

• mySCADA myPRO
• Hard-coded credentials

Hard-coded ArchiverSpaApi JWT Signing Key

• GFI Archiver
• Hard-coded credentials

Hard-coded cryptographic key in Ivanti Workspace Control

• Ivanti Workspace Control
• Hard-coded credentials

Hard-coded cryptographic key in Ivanti Workspace Control

• Ivanti Workspace Control
• Hard-coded credentials

Hard-coded cryptographic key in Ivanti Workspace Control

• Ivanti Workspace Control
• Hard-coded credentials

CyberData 011209 SIP Emergency Intercom Insufficiently Protected Credentials

• CyberData 011209 SIP Emergency Intercom
• Hard-coded credentials

Requests vulnerable to .netrc credentials leak via malicious URLs

• Hard-coded credentials

<2.32.4 · fixed in 2.32.4

WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability

• WOLFBOX Level 2 EV Charger
• Hard-coded credentials

Use of Hard-coded Credentials in OnlineSuite

• B. Braun Melsungen AG OnlineSuite
• Hard-coded credentials

IBM Security Verify Governance information disclosure

• IBM Security Verify Governance
• Hard-coded credentials

ISE on AWS Static Credential

• Cisco Identity Services Engine Software
• Hard-coded credentials

Hard-coded cryptographic key in Arris VIP1113

• Arris VIP1113
• Hard-coded credentials

NuCom NC-WR744G Console Application hard-coded credentials

• NuCom NC-WR744G
• Hard-coded credentials

Default Credentials

• JCT Airpointer
• Hard-coded credentials

Project AI API Key Exposure in Source Code

• aryan6673 project-ai
• Hard-coded credentials

Consilium Safety CS5000 Fire Panel Use of Hard-coded Credentials

• Consilium Safety CS5000 Fire Panel
• Hard-coded credentials

ActiveMQ Artemis AMQ Broker Operator Starting Credentials Reuse in github.com/arkmq-org/activemq-artemis-operator

• Hard-coded credentials

* · no fixed version yet

Netwrix Directory Manager (formerly Imanami GroupID) through v.10.0.7784.0 has a hard-coded password.

• Hard-coded credentials

Hard-coded credentials in Dell PowerStore

• Dell PowerStore
• Hard-coded credentials

Netwrix Directory Manager v.11.0.0.0 and before & after v.11.1.25134.03 contains a hardcoded password.

• Hard-coded credentials

PerfreeBlog JWT JwtUtil hard-coded key

• PerfreeBlog
• Hard-coded credentials
• CWE-320

Injection vulnerability in Iridium Certus 700

• Intellian Technologies Iridium Certus 700
• Hard-coded credentials

Disclosure of Alibaba (OSS) Keys In Ecovacs Home Android and iOS Mobile Applications

• Ecovacs Mobile and Android Application
• Hard-coded credentials

Schule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks

• Schule
• Hard-coded credentials

MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability

• MedDream WEB DICOM Viewer
• Hard-coded credentials

Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stations

• eCharge Hardy Barth cPH2 / cPP2 charging stations
• Hard-coded credentials

Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

• eCharge Hardy Barth cPH2 / cPP2 charging stations
• Hard-coded credentials