Hard-coded credentials.

Hard-coded cryptographic key in 2N Access Commander

• 2N Access Commander
• Hard-coded credentials

Credentials Disclosure - keys

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• Hard-coded credentials

An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generat…

• Hard-coded credentials

Forever KidsWatch Call Me KW50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h, and Forever KidsWatch Call Me 2 KW60 R36CW_YDE_S4_A29_2_V1.0_2023.05.24_22.49.44_cob_b have a Hardcoded password vulne…

• Hard-coded credentials

Four-Faith F3x36 Hidden Debug Credentials

• Four-Faith F3x36
• Hard-coded credentials
• CWE-489

SMB/FTP Address Book Scan Pass-back attack

• Xerox Versalink B400
• Xerox Versalink B405
• Authentication bypass
• Hard-coded credentials

Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addali…

• Hard-coded credentials

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation.

• Hard-coded credentials

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

• Rockwell Automation FactoryTalk® AssetCentre
• Hard-coded credentials

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

• Rockwell Automation FactoryTalk® AssetCentre
• Hard-coded credentials

Rockwell Automation FactoryTalk® AssetCentre Data Exposure Vulnerability

• Rockwell Automation FactoryTalk® AssetCentre
• Hard-coded credentials

IBM Aspera Faspex information disclosure

• IBM Aspera Faspex
• Hard-coded credentials

IBM Aspera Faspex information disclosure

• IBM Aspera Faspex
• Hard-coded credentials

Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain sensitive information via the password an…

• Hard-coded credentials

The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote attackers to reach the administration panel and discover ho…

• Hard-coded credentials

SunGrow WiNet-SV200.001.00.P027 and earlier versions contains hardcoded MQTT credentials that allow an attacker to send arbitrary commands to an arbitrary inverter.

• Hard-coded credentials

SunGrow WiNet-SV200.001.00.P027 and earlier versions contains a hardcoded password that can be used to decrypt all firmware updates.

• Hard-coded credentials

Flawed token generation implementation & Hard-coded key implementation

• Xerox Workplace Suite
• Hard-coded credentials

ECOVACS lawnmowers and vacuums static BLE GATT encryption key

• ECOVACS Unspecified robots
• Hard-coded credentials

ECOVACS lawnmowers and vacuums deterministic root password

• ECOVACS Unspecified robots
• Hard-coded credentials

ECOVACS lawnmowers and vacuums deterministic firmware encryption key

• ECOVACS Unspecified robots
• Weak cryptography or TLS
• Hard-coded credentials

Unsafe stored password recovery

• M-Files Corporation M-Files Server
• Hard-coded credentials

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed.

• Hard-coded credentials

Ossur Mobile Logic Application Use of Hard-coded Credentials

• Ossur Mobile Logic Application
• Hard-coded credentials

Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop

• desktop
• Hard-coded credentials

HI-SCAN 6040i Hitrax HX-03-19-I was discovered to contain hardcoded credentials for access to vendor support and service access.

• Hard-coded credentials

Hard-coded cryptographic key in Fortinet FortiClientWindows

• Fortinet FortiClientWindows
• Hard-coded credentials

Hard-coded cryptographic key in Fortinet FortiSwitch

• Fortinet FortiSwitch
• Hard-coded credentials

In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH.

• Hard-coded credentials

Insufficiently protected credentials in Venki Supravizio BPM

• Venki Supravizio BPM
• Hard-coded credentials

HCL MyXalytics is affected by an improper password policy implementation vulnerability

• HCL Software DRYiCE MyXalytics
• Hard-coded credentials

Plaintext default credentials in firmware

• Iocharger firmware for AC models
• Hard-coded credentials
• CWE-256

Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities.

• Broken access control
• Information disclosure

IBM Cognos Controller information disclosure

• IBM Controller
• IBM Cognos Controller
• Hard-coded credentials

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0.

• Hard-coded credentials

Weak credentials in CTFd

• CTFd
• Hard-coded credentials
• CWE-837

Insufficiently protected credentials in JetBrains TeamCity

• JetBrains TeamCity
• Hard-coded credentials

Improper authentication in HUAWEI Mate 20 Pro

• HUAWEI Mate 20 Pro
• Authentication bypass
• Hard-coded credentials

Weak credentials in Sophos Firewall

• Sophos Firewall
• Hard-coded credentials

QTS, QuTS hero, QuTScloud

• QNAP Systems Inc. QTS
• QNAP Systems Inc. QuTS hero
• Denial of service
• Hard-coded credentials

IBM Robotic Process Automation information disclosure

• IBM Robotic Process Automation
• Hard-coded credentials

Hardcoded Password in Wapro ERP Desktop

• Asseco Business Solutions S.A. Wapro ERP Desktop
• Hard-coded credentials

ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.

• Hard-coded credentials

Hard-coded credentials in Dell RecoverPoint for Virtual Machines

• Dell RecoverPoint for Virtual Machines
• Hard-coded credentials

Hardcoded credentials

• Image Access GmbH Scan2Net
• Hard-coded credentials

Insufficiently protected credentials in Apple macOS

• Apple macOS
• Hard-coded credentials

Insufficiently protected credentials in Siemens CPCI85 Central Processing/Communication

• Siemens CPCI85 Central Processing/Communication
• Hard-coded credentials

TP-Link TL-WR845N(UN)_V4_201214, TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 were discovered to contain weak default credentials for the Administrator account.

• Hard-coded credentials

TP-Link TL-WR845N(UN)_V4_190219 was discovered to transmit credentials in base64 encoded form, which can be easily decoded by an attacker executing a man-in-the-middle attack.

• Hard-coded credentials

Pentaminds CuroVMS v2.0.1 was discovered to contain exposed credentials.

• Hard-coded credentials

Ruijie Reyee OS Use of Weak Credentials

• Ruijie Reyee OS
• Hard-coded credentials

Ubiquiti U6-LR 6.6.65 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

Ubiquiti U7-Pro 7.0.35 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.

• Hard-coded credentials

Hard-coded credentials in SonicWall SMA100

• SonicWall SMA100
• Hard-coded credentials

Username Enumeration

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• Hard-coded credentials

Weak Password Rules/Strength

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• Hard-coded credentials

STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface.

• Hard-coded credentials

Insufficiently protected credentials in Veeam Backup & Replication

• Veeam Backup & Replication
• Hard-coded credentials

A hardcoded decryption key in Thinkware Cloud APK v4.3.46 allows attackers to access sensitive data and execute arbitrary commands with elevated privileges.

• Hard-coded credentials

IBM Cognos Controller hard coded credentials

• IBM Cognos Controller
• Hard-coded credentials