Advisories · Weakness
Hard-coded credentials.
Passwords and keys built into the code, or weak credentials. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820.
- Hard-coded credentials
- CVSS 6.5 Medium
In the IROAD APK 5.2.5, there are Hardcoded Credentials in the APK for ports 9091 and 9092.
- Hard-coded credentials
- CVSS 8.8 High
On IROAD v9 devices, the dashcam has hardcoded default credentials ("qwertyuiop") that cannot be changed by the user.
- Hard-coded credentials
- CVSS 8.4 High
Hard-coded password in Dell SmartFabric OS10 Software
- Dell SmartFabric OS10 Software
- Hard-coded credentials
- CVSS 3.6 Low
Hard-coded credentials in Fortinet FortiSIEM
- Fortinet FortiSIEM
- Hard-coded credentials
- CVSS 7.8 High
Hard-coded cryptographic key in Fortinet FortiSandbox
- Fortinet FortiSandbox
- Hard-coded credentials
- CVSS 7.4 High
Account Takeover
- Zohocorp Analytics Plus
- Hard-coded credentials
- CVSS 9.1 CriticalCritical · CVSS 9+
An issue in the storage of NFC card data in Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 allows attackers to produce cloned NFC cards to bypass authentication.
- Hard-coded credentials
- CVSS 7.7 High
IROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials
- IROAD Dash Cam X5
- IROAD Dash Cam X6
- Hard-coded credentials
- CVSS 6.9 Medium
IROAD X5 Mobile App API Endpoint hard-coded credentials
- IROAD X5 Mobile App
- Hard-coded credentials
- CVSS 6.9 Medium
274056675 springboot-openai-chatgpt OpenController.java hard-coded credentials
- 274056675 springboot-openai-chatgpt
- Hard-coded credentials
- CVSS 7.3 High
Civi - Job Board & Freelance Marketplace WordPress Theme <= 2.1.4 - Sensitive Information Exposure
- uxper Civi - Job Board & Freelance Marketplace WordPress Theme
- Hard-coded credentials
- CVSS 8.5 High
Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials
- Philips Intellispace Cardiovascular (ISCV)
- Hard-coded credentials
- CVSS 7.1 High
An issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the lack of enforcement of password strength policies.
- Hard-coded credentials
- CVSS 5.3 Medium
IBM Sterling File Gateway information disclosure
- IBM Sterling File Gateway
- Hard-coded credentials
- CVSS 8.0 High
Hard-coded credentials in GE Vernova EnerVista UR Setup
- GE Vernova EnerVista UR Setup
- Hard-coded credentials
- CVSS 7.1 High
Pass-Back vulnerability in Sage 200 Spain
- Sage 200 Spain
- Hard-coded credentials
- CVSS 10.0 CriticalCritical · CVSS 9+
Insufficiently Protected Credentials
- OpenText Identity Manager Advanced Edition
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Weidmueller: Authentication Vulnerability due to Hard-coded Credentials
- Weidmueller PROCON-WIN
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Hardcoded IdP Key V-2023-006.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Weak Password Encryption / Encoding OVE-20230524-0007.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.862 Application 20.0.2014 allows Private Keys in Docker Overlay V-2023-013.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.913 Application 20.0.2253 allows Cross Tenant Password Exposure V-2024-003.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.933 Application 20.0.2368 allows Hardcoded AWS API Key V-2024-006.
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.1002 Application 20.0.2614 allows Hardcoded Password V-2024-013.
- Hard-coded credentials
- CVSS 2.4 Low
i-Drive i11/i12 APK hard-coded credentials
- i-Drive i11
- i-Drive i12
- Hard-coded credentials
- CVSS 7.5 High
IBM Engineering Requirements Management DOORS Next information disclosure
- IBM Engineering Requirements Management DOORS Next
- Hard-coded credentials
- CVSS 7.5 High
IBM Engineering Requirements Management DOORS Next information disclosure
- IBM Engineering Requirements Management DOORS Next
- Hard-coded credentials
- CVSS 5.3 Medium
IBM Controller information disclosure
- IBM Controller
- Hard-coded credentials
- CVSS 8.0 High
TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
- Hard-coded credentials
- CVSS 6.8 Medium
Cryptographic key extraction from internal flash in Minut M2 with firmware version #15142 allows physically proximate attackers to inject modified firmware into any other Minut M2 product via USB.
- Hard-coded credentials
- CVSS 8.2 High
Information Disclosure in E-Kent's Pallium Vehicle Tracking
- E-Kent Pallium Vehicle Tracking
- Hard-coded credentials
- CWE-921
- CVSS 9.8 CriticalCritical · CVSS 9+
Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.
- Hard-coded credentials
- CVSS 8.8 High
In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege escalation.
- Broken access control
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing down…
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
SunGrow iSolarCloud Android application V2.1.6.20241017 and prior contains hardcoded credentials.
- Hard-coded credentials
- CVSS 2.7 Low
Stored Credential Disclosure Vulnerability
- Tenable Identity Exposure
- Hard-coded credentials
- CVSS 4.0, no score published
Leantime has Insufficiently Protected Credentials
- Hard-coded credentials
<3.3 · fixed in 3.3
GHSA-h6w8-27ph-c385 - CVSS 6.3 Medium
Hitachi Vantara Pentaho Data Integration & Analytics - Insufficiently Protected Credentials
- Hitachi Vantara Pentaho Data Integration & Analytics
- Hitachi Vantara Pentaho Business Analytics Server
- Hard-coded credentials
- CVSS 8.8 High
IBM Cognos Controller information disclosure
- IBM Cognos Controller
- IBM Controller
- Hard-coded credentials
- CVSS 6.3 Medium
PMWeb Setting weak password
- PMWeb
- Hard-coded credentials
- CVSS 7.3 High
Hard-coded credentials in GoodWe Technologies Co., Ltd. GW1500‑XS
- GoodWe Technologies Co., Ltd. GW1500‑XS
- Hard-coded credentials
- CVSS 9.9 CriticalCritical · CVSS 9+
Privilege Escalation in MEAC300
- SICK AG SICK MEAC300
- Hard-coded credentials
- CVSS 5.4 Medium
IXON B.V.
- Hard-coded credentials
- CVSS 8.8 High
Hard-coded cryptographic key in Q-Free MaxTime
- Q-Free MaxTime
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Hard-coded password in Q-Free MaxTime
- Q-Free MaxTime
- Hard-coded credentials
- CVSS 3.9 Low
Hard-coded cryptographic key in Fortinet FortiManager
- Fortinet FortiManager
- Hard-coded credentials
- CVSS 6.0 Medium
Hard-coded cryptographic key in Ivanti Connect Secure and others
- Ivanti Connect Secure
- Ivanti Policy Secure
- Hard-coded credentials
- CVSS 7.7 High
Insufficiently protected credentials in JetBrains TeamCity
- JetBrains TeamCity
- Hard-coded credentials
- CVSS 9.8 CriticalCritical · CVSS 9+
Weak Hard-coded Credentials
- Wattsense Bridge
- Hard-coded credentials
- CVSS 5.5 Medium
SolarWinds Web Help Desk Cryptographic Key Management Vulnerability
- SolarWinds Web Help Desk
- Hard-coded credentials
- CVSS 8.4 High
Billion Electric M120N - Use of Hard-coded Credentials
- Billion Electric M100
- Billion Electric M150
- Hard-coded credentials
- CVSS 7.0 High
Information Disclosure Vulnerability in TP-Link Tapo C500 Wi-Fi Camera
- TP-Link Tapo C500 V1 Wi-Fi Camera
- TP-Link Tapo C500 V2 Wi-Fi Camera
- Hard-coded credentials
- CVSS 8.3 High
Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.
- Hard-coded credentials
- CVSS 8.8 High
A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative pr…
- Hard-coded credentials
- CVSS 8.8 High
A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative priv…
- Hard-coded credentials
- CVSS 6.4 Medium
Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices
- Welch Allyn ELI 380 Resting Electrocardiograph
- Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph
- Hard-coded credentials
- CVSS 7.5 High
An issue was discovered in AudioCodes One Voice Operations Center (OVOC) before 8.4.582.
- Hard-coded credentials
- CVSS 2.3 Low
Bharti Airtel Xstream Fiber WiFi Password weak credentials
- Bharti Airtel Xstream Fiber
- Hard-coded credentials