CWE-1392

Use of Default Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

109 vulnerabilities with CWE-1392
CVE-2024-12013 HIGH
130.8005 TCP/IP Gateway <12h - Info Disclosure
CVSS 7.6
CVE-2024-54015 HIGH
SIPROTEC 5 - Unauthenticated Sensitive Information Exposure via SNMPv2 GET Requests with Default Credentials
CVSS 7.5
CVE-2024-12856 HIGH
Four-Faith F3x24 and F3x36 Firmware 2.0 - Authenticated OS Command Injection via apply.cgi
CVSS 7.2
CVE-2024-12902 HIGH
Global Wisdom Software ANCHOR 2.5.0-2.5.9.4 and 2.7.0-2.7.2.3 - Use of Default Credentials
CVSS 8.4
CVE-2024-10476 HIGH
BD Diagnostic Solutions - Info Disclosure
CVSS 8.0
CVE-2024-12286 CRITICAL
MOBATIME Network Master Clock - DTS 4801 - Auth Bypass
CVSS 9.8
CVE-2024-45068 HIGH
Hitachi Ops Center <11.0.3-00 - Info Disclosure
CVSS 7.1
CVE-2024-6245 HIGH
Maruti Suzuki SmartPlay <66T0.05.50 - Default Credentials
CVSS 7.4
CVE-2024-39747 HIGH
IBM Sterling Connect:Direct Web Services <6.4 - Info Disclosure
CVSS 8.1
CVE-2024-39584 HIGH
Dell Client Platform BIOS - Use After Free
CVSS 8.2
CVE-2024-7898 HIGH
Tosei Online Store Management System <4.04 - Default Credentials
CVSS 7.3
CVE-2024-7746 CRITICAL
Traccar 2.12-6.0 - Authentication Abuse via Default Credentials
CVSS 9.8
CVE-2024-6788 HIGH
CHARX SEC-3000/3050/3100/3150 <1.6.3 Unauthenticated Password Reset via LAN Update
CVSS 8.6
CVE-2024-6535 MEDIUM
Skupper - Auth Bypass
CVSS 5.3
CVE-2024-5632 MEDIUM
Longse NVR3608PGE2W and Zamel ZMB-01 - Use of Default Credentials in WiFi Network
CVE-2024-4007 HIGH
ABB ASPECT; NEXUS Series; MATRIX Series <3.07 - Info Disclosure
CVSS 8.8
CVE-2024-27158 HIGH
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Default Credentials
CVSS 7.4
CVE-2024-5245 HIGH
NETGEAR ProSAFE Network Management System < 1.7.0.37 - Local Privilege Escalation via Default MySQL Credentials
CVSS 7.8
CVE-2024-4622 HIGH
alpitronic Hypercharger - Auth Bypass
CVE-2024-29844 CRITICAL
Evolution Controller 2.x - Info Disclosure
CVSS 9.8
CVE-2024-31069 HIGH
IO-1020 Micro ELD web server - Info Disclosure
CVSS 7.4
CVE-2024-30210 HIGH
IO-1020 Micro ELD - Info Disclosure
CVSS 7.4
CVE-2024-28093 HIGH
AdTran NetVanta 3120 - Info Disclosure
CVSS 8.8
CVE-2023-27573 CRITICAL
netbox-docker < 2.5.0 - Use of Default Credentials
CVSS 9.0
CVE-2023-40704 MEDIUM
Philips Vue PACS < 12.2.8.410 - Use of Default Credentials
CVSS 6.8
Details
Vulnerabilities 109
Links
MITRE CWE Entry Search this CWE With Exploits