CWE-1392

Use of Default Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

98 vulnerabilities with CWE-1392
CVE-2025-10678 CRITICAL
NetBird < 0.57.0 - Use of Default Credentials in Admin Account
CVE-2025-11943 HIGH
70mai X200 <20251010 - Default Credentials
CVSS 7.3
CVE-2025-34516 CRITICAL
Ilevia EVE X1 Server <4.7.18.0.eden - Default Credentials
CVSS 9.8
CVE-2025-10542 CRITICAL
iMonitor EAM 9.63.94 - Use of Default Credentials
CVSS 9.8
CVE-2025-35042 CRITICAL
Airship AI Acropolis - Privilege Escalation
CVSS 9.8
CVE-2025-55110 MEDIUM
BMC Control-M/Agent - Use of Default Credentials in Keystore
CVSS 5.5
CVE-2025-55051 CRITICAL
Default Credentials - Info Disclosure
CVSS 10.0
CVE-2025-35452 CRITICAL
PTZOptics PT12x-SDI-XX-G2 and other ValueHD-based Cameras - Use of Default Credentials
CVSS 9.8
CVE-2025-9577 LOW
TOTOLINK X2000R <2.0.0 - Use After Free
CVSS 2.5
CVE-2025-9576 LOW
seeedstudio ReSpeaker LinkIt7688 - Default Credentials
CVSS 2.5
CVE-2025-35114 HIGH
Agiloft 19-28 - Use of Default Credentials
CVSS 7.5
CVE-2025-29525 MEDIUM
DASAN GPON ONU H660WM OS - Info Disclosure
CVSS 5.3
CVE-2025-29521 MEDIUM
D-Link DSL-7740C - Privilege Escalation
CVSS 5.3
CVE-2025-55740 MEDIUM
Anipaleja nginx-defender < 1.5.0 - Use of Default Credentials
CVSS 6.5
CVE-2025-2184 MEDIUM
Palo Alto Networks Cortex XDR - Info Disclosure
CVE-2025-8731 CRITICAL
TRENDnet <20250724 - Default Credentials
CVSS 9.8
CVE-2025-8530 MEDIUM
eladmin < 2.7 - Use of Default Credentials in Druid Configuration
CVSS 5.3
CVE-2025-51535 CRITICAL
OpenAtlas < 8.12.0 - SQL Injection
CVSS 9.1
CVE-2025-51536 CRITICAL
OpenAtlas <8.11.0 - Info Disclosure
CVSS 9.8
CVE-2025-29629 CRITICAL
Gardyn Home Kit Firmware < master.619 - Use of Default Credentials
CVSS 9.1
CVE-2025-54137 HIGH
HAX CMS NodeJS <11.0.9 - Info Disclosure
CVSS 7.3
CVE-2025-7907 MEDIUM
yangzongzhuan RuoYi <4.8.1 - Use After Free
CVSS 4.3
CVE-2025-1711 MEDIUM
Multiple Services - Info Disclosure
CVSS 4.3
CVE-2025-6951 MEDIUM
SAFECAM X300 <20250611 - Default Credentials
CVSS 4.3
CVE-2025-52997 MEDIUM
File Browser <2.34.1 - Info Disclosure
CVSS 5.9
Details
Vulnerabilities 98