Hard-coded credentials.

Scrapy HTTP authentication credentials potentially leaked to target websites

• Information disclosure
• Hard-coded credentials

<1.8.1 || >=2.0.0, <2.5.1 · fixed in 1.8.1, 2.5.1

ECOA BAS controller - Insufficiently Protected Credentials-2

• ECOA ECS Router Controller ECS (FLASH)
• ECOA RiskBuster Terminator E6L45
• Hard-coded credentials

ECOA BAS controller - Use of Hard-coded Credentials

• ECOA ECS Router Controller ECS (FLASH)
• ECOA RiskBuster Terminator E6L45
• Hard-coded credentials

ECOA BAS controller - Insufficiently Protected Credentials-1

• ECOA ECS Router Controller ECS (FLASH)
• ECOA RiskBuster Terminator E6L45
• Hard-coded credentials

ECOA BAS controller - Weak Password Requirements

• ECOA ECS Router Controller ECS (FLASH)
• ECOA RiskBuster Terminator E6L45
• Hard-coded credentials

Hard-coded credentials in D-Link

• D-Link
• Hard-coded credentials

Hard-coded Credentials in Enbra Wireless M-Bus devices

• Enbra AT-WMBUS-16-2
• Enbra ER-AM DN 15
• Hard-coded credentials

Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch

• QNAP Systems Inc. QSW-M2116P-2T2S
• QNAP Systems Inc. QuNetSwitch
• Hard-coded credentials

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability

• Cisco Prime Infrastructure
• Hard-coded credentials

In WirelessHART-Gateway versions 3.0.7 to 3.0.9 hard-coded credentials have been found

• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH
• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP
• Hard-coded credentials

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH
• Phoenix Contact WHA-GW-F2D2-0-AS- Z2-ETH.EIP
• Hard-coded credentials

D-Link DVG-3104MS version 1.0.2.0.3, 1.0.2.0.4, and 1.0.2.0.4E contains hard-coded credentials for undocumented user accounts in the '/etc/passwd' file.

• Hard-coded credentials

Password in Memory Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)

• Hitachi ABB Power Grids Retail Operations
• Hitachi ABB Power Grids Counterparty Settlement and Billing (CSB)
• Hard-coded credentials

Hard-coded credentials in Ypsomed mylife Cloud, mylife Mobile Application

• Ypsomed mylife Cloud, mylife Mobile Application
• Hard-coded credentials

Insufficiently protected credentials in Ypsomed mylife Cloud, mylife Mobile Application

• Ypsomed mylife Cloud, mylife Mobile Application
• Hard-coded credentials

Insufficiently protected credentials in Ypsomed mylife Cloud, mylife Mobile Application

• Ypsomed mylife Cloud, mylife Mobile Application
• Hard-coded credentials

Hard-coded password in Dell Data Protection Advisor

• Dell Data Protection Advisor
• Hard-coded credentials

Akkadian Provisioning Manager Engine (PME) Hard-Coded Credentials

• Akkadian Provisioning Manager Engine (PME)
• Hard-coded credentials

Cisco SD-WAN vManage Software Information Disclosure Vulnerability

• Cisco SD-WAN vManage
• Hard-coded credentials

Hard-coded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…

• EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
• Hard-coded credentials

Hard-coded password in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…

• EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
• Hard-coded credentials

Hard-coded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)…

• EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 )
• Hard-coded credentials

Hard-coded credentials in Dell Networking

• Dell Networking
• Hard-coded credentials

Basic-auth app bundle credential exposure in gatsby-source-wordpress

• Information disclosure
• Hard-coded credentials

<4.0.8 || >=5.0.0, <5.9.2 · fixed in 4.0.8, 5.9.2

Learningdigital.com, Inc. Orca HCM - Hard-code password

• Learningdigital.com, Inc. Orca HCM
• Hard-coded credentials

TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system - Use of Hard-coded Credentials

• TAIWAN SECOM CO., LTD., Door Access Control and Personnel Attendance Management system
• Hard-coded credentials

Hard-coded password in D-Link

• D-Link
• Hard-coded credentials

Hard-coded credentials in D-Link

• D-Link
• Hard-coded credentials

Contrail Cloud: Hardcoded credentials for RabbitMQ service

• Juniper Networks Contrail Cloud
• Hard-coded credentials

Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…

• EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions
• Hard-coded credentials

Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…

• EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions
• Hard-coded credentials

Insufficiently protected credentials in EcoStruxure Control Expert (all versions prior to V15.0 SP1…

• EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions
• Hard-coded credentials

Weak password in API gateway in EdgeX Foundry Edinburgh, Fuji, Geneva, and Hanoi releases allows remote attackers to obtain authentication token via dictionary-based password attack when OAuth2 authe…

• edgexfoundry edgex-go
• Broken access control
• Authentication bypass

Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6

• Hard-coded credentials

QSAN SANOS - Use of Hard-coded Credentials

• QSAN SANOS
• Hard-coded credentials

QSAN Storage Manager - Use of Hard-coded Password-2

• QSAN Storage Manager
• Hard-coded credentials

QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password

• QSAN Storage Manager
• QSAN XEVO
• Hard-coded credentials

QSAN Storage Manager - Use of Hard-coded Cryptographic Key

• QSAN Storage Manager
• Hard-coded credentials

Hard-coded credentials in Arlo Q Plus

• Arlo Q Plus
• Hard-coded credentials

Phoenix Contact: Undocumented FTP acces in certain AXL F BK and IL BK devices

• Phoenix Contact AXL F BK
• Phoenix Contact IL
• Hard-coded credentials

WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

• Weidmüller IE-WL(T)-BL-AP-CL-XX
• Weidmüller IE-WL(T)-VL-AP-CL-XX
• Hard-coded credentials

WEIDMUELLER: WLAN devices affected by Hard-coded Credentials vulnerability

• Weidmüller IE-WL(T)-BL-AP-CL-XX
• Weidmüller IE-WL(T)-VL-AP-CL-XX
• Hard-coded credentials

Hard-coded credentials in Synology Calendar

• Synology Calendar
• Hard-coded credentials

Hard-coded credentials in GE Reason RPV311

• GE Reason RPV311
• Hard-coded credentials

Hard-coded cryptographic key in ZOLL Defibrillator Dashboard

• ZOLL Defibrillator Dashboard
• Hard-coded credentials

Cisco ThousandEyes Recorder Information Disclosure Vulnerability

• Cisco ThousandEyes Recorder Application
• Hard-coded credentials

Hard-coded credentials in ceph-ansible

• ceph-ansible
• Hard-coded credentials

Insufficiently protected credentials in ceph-dashboard

• ceph-dashboard
• Hard-coded credentials

Insufficiently protected credentials in Versa Director, Versa Analytics, Versa VOS

• Versa Director, Versa Analytics, Versa VOS
• Hard-coded credentials

SITEL CAP/PRX hardcoded credentials

• SITEL CAP/PRX
• Hard-coded credentials

Hard-coded credentials in SonicWall Email Security Virtual Appliance

• SonicWall Email Security Virtual Appliance
• Hard-coded credentials

Insufficiently protected credentials in NooBaa

• NooBaa
• Hard-coded credentials

WAGO: Managed Switches: Unauthorized access to password hashes

• WAGO 0852-0303
• WAGO 0852-1305
• Hard-coded credentials

Improper permission handling in Apache Solr

• Hard-coded credentials
• CWE-279

<8.8.2 · fixed in 8.8.2

Hard-coded credentials in WISE-PaaS/RMM

• WISE-PaaS/RMM
• Hard-coded credentials

MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera - Broken Authentication

• MERIT LILIN ENT.CO.,LTD. P2/Z2/P3/Z3 IP camera firmware
• Hard-coded credentials

EDIMAX Technology Co., Ltd. HD Wireless Day & Night Network Camera IC-3140W - Hard-coded password

• EDIMAX Technology Co., Ltd. IC-3140W
• Hard-coded credentials

Hard-coded cryptographic key in Siemens Siveillance Video Open Network Bridge

• Siemens Siveillance Video Open Network Bridge
• Hard-coded credentials

Hard-coded cryptographic key in Siemens Opcenter Quality and others

• Siemens Opcenter Quality
• Siemens QMS Automotive
• Hard-coded credentials

cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

• Juniper Networks Junos OS
• Hard-coded credentials