CWE-798

A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable acces

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRou

A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical.

In the Kaden PICOFLUX AiR water meter an adversary can read the values through wireless M-Bus mode 5 with a hardcoded sh

Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to al

Use of static encryption key material allows forging an authentication token to other users within a tenant organization

Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across al

An information disclosure vulnerability exists due to the hardcoded TLS key of reolink RLC-410W v3.0.0.136_20121102. A s

A vulnerability was found in GE Voluson S8. It has been rated as critical. This issue affects the Service Browser which

The web app client of TP-Link AX10v1 V1_211117 uses hard-coded cryptographic keys when communicating with the router. At

Use of hard-coded TLS certificate by default allows an attacker to perform Man-in-the-Middle (MitM) attacks even in the

Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An a

This vulnerability affects all of the company's products that also include the FW versions: update_i90_cv2.021_b20210104

Use of Hard-coded Password vulnerability in Mitsubishi Electric GX Works3 versions from 1.000A to 1.090U, GT Designer3 V

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncry

Emerson OpenBSI through 2022-04-29 uses weak cryptography. It is an engineering environment for the ControlWave and Bris

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP ha

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET

The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC S

Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x includes the functionality of setting a password that is requir

By having access to the hard-coded cryptographic key for GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions

Disclosure of information - the system allows you to view usernames and passwords without permissions, thus it will be p

Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has a hardcoded certificate for Ejabberd in ejabberd.pem.

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cis

FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorizati

A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Mana

Honeywell Experion PKS Safety Manager 5.02 uses Hard-coded Credentials. According to FSCT-2022-0052, there is a Honeywel

ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators

In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and p

Multiple globally default credentials exist across all CMS8000 devices, that once exposed, allow a threat actor with mom

A vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser

Jimoty App for Android versions prior to 3.7.42 uses a hard-coded API key for an external service. By exploiting this vu

Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplu

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

RTL8111EP-CG/RTL8111FP-CG DASH function has hard-coded password. An unauthenticated physical attacker can use the hard-c

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including ver

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper

Airangel HSMX Gateway devices through 5.2.04 have Hard-coded Database Credentials.

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that all

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to

An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user12

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%o

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadm

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadm

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admin

An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin