CWE-256

High likelihood

Plaintext Storage of a Password

Parent: CWE-522 - Insufficiently Protected Credentials

The product stores a password in plaintext within resources such as memory or files.

204 vulnerabilities with CWE-256
CVE-2021-3787 MEDIUM
Motorola-branded Binatone Hubble Cameras - Info Disclosure
CVSS 6.4
CVE-2021-36309 HIGH
Dell Enterprise SONiC OS <3.3.0 - Info Disclosure
CVSS 7.1
CVE-2021-1589 MEDIUM
Cisco SD-WAN vManage Software - Privilege Escalation
CVSS 6.5
CVE-2021-25358 MEDIUM
SMR APR-2021 < Release 1 - Info Disclosure
CVSS 4.0
CVE-2021-1126 MEDIUM
Cisco Firepower Management Center - Info Disclosure
CVSS 5.5
CVE-2020-37115 MEDIUM
GUnet OpenEclass 1.7.3 - Info Disclosure
CVSS 6.5
CVE-2020-25184 HIGH
Schneider-electric Easergy T300 Firmware - Information Disclosure
CVSS 7.8
CVE-2020-5315 HIGH
Dell EMC Repository Manager 3.2 - Info Disclosure
CVSS 8.8
CVE-2020-26079 MEDIUM
Cisco IoT Field Network Director < 4.6.1 - Authenticated Password Hash Exposure via User Information Call
CVSS 4.9
CVE-2020-8183 HIGH
Nextcloud Server 19.0.0 - Info Disclosure
CVSS 7.5
CVE-2020-1669 MEDIUM
Juniper Networks Junos OS <19.4R3-20.1R1-S4 - Info Disclosure
CVSS 6.3
CVE-2020-3483 HIGH
Duo Network Gateway - Info Disclosure
CVSS 7.1
CVE-2020-10609 HIGH
Grundfos CIM 500 v06.16.00 - Info Disclosure
CVSS 7.5
CVE-2020-5374 HIGH
Dell EMC OMIMSSC <7.2.1 - Info Disclosure
CVSS 8.8
CVE-2020-6961 CRITICAL
ApexPro Telemetry Server <4.2 - Info Disclosure
CVSS 10.0
CVE-2019-19105 MEDIUM
ABB Telephone Gateway TG/S <3.2 - Info Disclosure
CVSS 6.2
CVE-2019-0072 MEDIUM
Juniper Networks SBR <8.4.1R13, <8.5.0R4 - Info Disclosure
CVSS 5.6
CVE-2019-10921 HIGH
Siemens LOGO! 8 BM Firmware < 8.3 - Unauthenticated Password Exposure via Port 10005/tcp
CVSS 7.5
CVE-2019-0032 HIGH
Juniper Networks Service Insight <18.1R1 - Info Disclosure
CVSS 7.8
CVE-2019-6518 HIGH
Moxa IKS-G6824A Firmware < 4.5 and EDS-405A/408A/510A Firmware < 3.8 - Plaintext Password Storage
CVSS 7.5
CVE-2018-25396 HIGH
Heatmiser Wifi Thermostat 1.7 Credential Disclosure via networkSetup.htm
CVSS 7.5
CVE-2018-25130 MEDIUM
Beward Intercom 2.3.1 - Info Disclosure
CVSS 6.2
CVE-2018-8851 CRITICAL
Echelon SmartServer <4.11.007 - Info Disclosure
CVSS 9.8
CVE-2018-7510 CRITICAL
BeaconMedaes TotalAlert Scroll <4107600010.23 - Info Disclosure
CVSS 9.8
CVE-2018-7515 MEDIUM
Omron CX-Supervisor <3.30 - Memory Corruption
CVSS 5.3
Details
Vulnerabilities 204
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits