Hard-coded credentials.

Media CP Media Control Panel – insufficiently protected credential change

• Media CP Media Control Panel
• Hard-coded credentials

Sunell DVR – Insufficiently Protected Credentials

• Sunell DVR
• Hard-coded credentials

Microsoft SQL Server Remote Code Execution Vulnerability

• Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE)
• Microsoft SQL Server 2012 Service Pack 4 (QFE)
• Hard-coded credentials

TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability

• TIBCO Software Inc. TIBCO Hawk
• TIBCO Software Inc. TIBCO Operational Intelligence Hawk RedTail
• Hard-coded credentials

EnOcean SmartServer Hard-coded credentials

• EnOcean Smartserver
• Hard-coded credentials

Deye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password

• Deye Inverter
• Revolt Inverter
• Hard-coded credentials

Redpanda before 22.3.12 discloses cleartext AWS credentials.

• Hard-coded credentials

Insufficiently protected credentials in FUJIFILM Business Innovation Corp. Driver Distributor

• FUJIFILM Business Innovation Corp. Driver Distributor
• Hard-coded credentials

Weak Password Requirements in thorsten/phpmyfaq

• Hard-coded credentials

<3.1.11 · fixed in 3.1.11

Hard-coded credentials in Dell PowerPath Management Appliance

• Dell PowerPath Management Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell SupportAssist Client Consumer

• Dell SupportAssist Client Consumer
• Hard-coded credentials

Hard-coded credentials in Samsung Mobile Devices

• Samsung Mobile Devices
• Hard-coded credentials

TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini.

• Hard-coded credentials

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow.

• Hard-coded credentials

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini.

• Hard-coded credentials

PHPGurukul Employee Leaves Management System changepassword.php weak password

• PHPGurukul Employee Leaves Management System
• Hard-coded credentials

A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request.

• Hard-coded credentials

Leaked user credentials in github.com/sylabs/scs-library-client

• Hard-coded credentials

<1.3.4 || >=1.4.0, <1.4.2 · fixed in 1.3.4, 1.4.2

Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure.

• Hard-coded credentials

Hard-coded credentials in Schneider Electric APC Easy UPS Online Monitoring Software and others

• Schneider Electric APC Easy UPS Online Monitoring Software
• Schneider Electric Easy UPS Online Monitoring Software
• Hard-coded credentials

Insufficiently protected credentials in Schneider Electric Data Center Expert

• Schneider Electric Data Center Expert
• Hard-coded credentials

Insufficiently protected credentials in Schneider Electric Data Center Expert

• Schneider Electric Data Center Expert
• Hard-coded credentials

Weak password requirements in Schneider Electric C-Bus Network Automation Controller, LSS5500NAC and others

• Schneider Electric C-Bus Network Automation Controller, LSS5500NAC
• Schneider Electric Wiser for C-Bus Automation Controller, LSS5500SHAC
• Hard-coded credentials

Publify contains Weak Password Requirements

• Hard-coded credentials

<9.2.10 · fixed in 9.2.10

Froxlor contains Weak Password Requirements

• Hard-coded credentials

<2.0.10 · fixed in 2.0.10

An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack.

• Hard-coded credentials

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory.

• Hard-coded credentials

User Verification < 1.0.94 - Authentication Bypass

• User Verification
• Hard-coded credentials

Hard-coded cryptographic key in Cisco Industrial Network Director

• Cisco Industrial Network Director
• Hard-coded credentials

Hard-coded cryptographic key in Dell EMC Secure Connect Gateway (SCG) Policy Manager

• Dell EMC Secure Connect Gateway (SCG) Policy Manager
• Hard-coded credentials

Hard-coded cryptographic key in Dell EMC Secure Connect Gateway (SCG) Policy Manager

• Dell EMC Secure Connect Gateway (SCG) Policy Manager
• Hard-coded credentials

CVE-2022-45444

• Sewio RTLS Studio
• Hard-coded credentials

phpMyFAQ has Weak Password Requirements

• Hard-coded credentials

<3.1.10 · fixed in 3.1.10

Insufficiently Protected Credentials in Metasys

• Johnson Controls Metasys ADS/ADX/OAS
• Hard-coded credentials

EXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.

• EXFO BV-10 Performance Endpoint Unit
• Hard-coded credentials

Rapid7 Nexpose Virtual Appliance Duplicate SSH Host Key

• Rapid7 Nexpose Virtual Appliance
• Rapid7 InsightVM Virtual Appliance
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Hard-coded credentials

Hard-coded cryptographic key in Dell Secure Connect Gateway (SCG) Policy Manager

• Dell Secure Connect Gateway (SCG) Policy Manager
• Hard-coded credentials

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• Hard-coded credentials

Insecure key generation for Zoom Rooms for macOS Clients

• Zoom Video Communications Inc Zoom Rooms for macOS
• Hard-coded credentials

CESNET theme-cesnet resetpassword.php insufficiently protected credentials

• theme-cesnet
• Hard-coded credentials

Netis Netcore Router hard-coded password

• Netis Netcore Router
• Hard-coded credentials

KubePi allows malicious actor to login with a forged JWT token via Hardcoded Jwtsigkeys

• Hard-coded credentials

<1.6.3 · fixed in 1.6.3

Hardcoded credential is found in the message queue

• Hitachi Energy FOXMAN-UN
• Hitachi Energy UNEM
• Hard-coded credentials

The affected products store public and private key that are used to sign and protect custom parameter set files from modification.

• Hitachi Energy FOXMAN-UN
• Hitachi Energy UNEM
• Hard-coded credentials

Use of default key for encryption

• Hitachi Energy FOXMAN-UN
• Hitachi Energy UNEM
• Hard-coded credentials

Insufficiently protected credentials in Prosys OPC UA Simulation Server and others

• Prosys OPC UA Simulation Server
• Prosys OPC UA Modbus Server
• Hard-coded credentials

Merit Lilin Ent. Co., Ltd. AH55B04 & AH55B08 DVR - Hard-coded Credentials

• Merit Lilin Ent. Co., Ltd. AH55B04 DVR firmware
• Merit Lilin Ent. Co., Ltd. AH55B08 DVR firmware
• Hard-coded credentials

Weak password requirements in Kiwi TCMS

• Kiwi
• Hard-coded credentials

taoeffect Empress hard-coded password

• taoeffect Empress
• Hard-coded credentials

Hard-coded credentials in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2

• DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
• Hard-coded credentials

Nokia Fastmile 3tg00118abad52 devices shipped by Optus are shipped with a default hardcoded admin account of admin:Nq+L5st7o This account can be used locally to access the web admin interface.

• Hard-coded credentials

Click Studios Passwordstate insufficiently protected credentials

• Click Studios Passwordstate
• Click Studios Passwordstate Browser Extension Chrome
• Hard-coded credentials

Click Studios Passwordstate hard-coded credentials

• Click Studios Passwordstate
• Click Studios Passwordstate Browser Extension Chrome
• Hard-coded credentials

Mutiny 7.2.0-10788 suffers from Hardcoded root password.

• Hard-coded credentials

Common Key Vulnerability in Serv-U FTP Server

• SolarWinds Serv-U FTP Server
• Hard-coded credentials

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 (20181130-16:12) has a Weak password vulnerability.

• Hard-coded credentials

Hard-coded cryptographic key in Delta Electronics Industrial Automation DIALink

• Delta Electronics Industrial Automation DIALink
• Hard-coded credentials

Hard-coded password in Daikin SVMPC1 and others

• Daikin SVMPC1
• Daikin SVMPC2
• Hard-coded credentials

Hard-coded cryptographic key in Horner Automation Remote Compact Controller (RCC) 972

• Horner Automation Remote Compact Controller (RCC) 972
• Hard-coded credentials