CWE-321

High likelihood

Use of Hard-coded Cryptographic Key

Parent: CWE-798 - Use of Hard-coded Credentials

The product uses a hard-coded, unchangeable cryptographic key.

276 vulnerabilities with CWE-321
CVE-2023-44318 MEDIUM
Affected Devices - Info Disclosure
CVSS 4.9
CVE-2023-41137 HIGH
AppsAnywhere - Info Disclosure
CVSS 8.0
CVE-2023-46129 HIGH
NATS.io <0.4.6 - Info Disclosure
CVSS 7.5
CVE-2023-42492 HIGH
EisBaer Scada - Buffer Overflow
CVSS 7.1
CVE-2023-43637 HIGH
Prior to v7.10 - Key Weakness
CVSS 7.8
CVE-2023-39982 HIGH
MXsecurity <1.0.1 - Info Disclosure
CVSS 7.5
CVE-2023-3404 MEDIUM
ProfileGrid <5.5.0 - Info Disclosure
CVSS 4.9
CVE-2023-32077 HIGH
Netmaker <0.17.1 and 0.18.6 - Info Disclosure
CVSS 7.5
CVE-2023-3632 CRITICAL
Kunduz < 6.2.3 - Authentication Bypass
CVSS 9.8
CVE-2023-3947 LOW
Video Conferencing with Zoom plugin <4.2.1 - Info Disclosure
CVSS 3.7
CVE-2023-37291 HIGH
Galaxy Software Services Vitals ESP <6.2.0 - Code Injection
CVSS 8.6
CVE-2023-34123 HIGH
SonicWall GMS <9.3.2-SP1 - Info Disclosure
CVSS 7.5
CVE-2023-22844 HIGH
Milesightvpn - Authentication Bypass
CVSS 7.3
CVE-2023-34338 HIGH
AMI SPx - Use After Free
CVSS 7.1
CVE-2023-3371 MEDIUM
WordPress <3.7.3 - Info Disclosure
CVSS 5.3
CVE-2023-2637 HIGH
Rockwell Automation's FactoryTalk System Services - Privilege Escal...
CVSS 7.3
CVE-2023-21404 MEDIUM
AXIS OS <11.3.x - Info Disclosure
CVSS 5.3
CVE-2023-2158 CRITICAL
Code Dx <2023.4.2 - User Impersonation
CVSS 9.8
CVE-2023-0391 HIGH
MGT-COMMERCE CloudPanel <2.2.1 - Info Disclosure
CVSS 8.1
CVE-2023-27583 CRITICAL
PanIndex <3.1.3 - Privilege Escalation
CVSS 9.8
CVE-2023-20016 MEDIUM
Cisco UCS/FXOS - Info Disclosure
CVSS 6.3
CVE-2023-21705 HIGH
Microsoft SQL Server - RCE
CVSS 8.8
CVE-2023-20038 HIGH
Cisco Industrial Network Director - Info Disclosure
CVSS 8.8
CVE-2022-48625 HIGH
Yealink Config Encrypt Tool <1.2 - Info Disclosure
CVSS 7.5
CVE-2022-34386 MEDIUM
Dell SupportAssist <3.11.4-3.2.0 - Info Disclosure
CVSS 5.5
Details
Vulnerabilities 276
Exploit Likelihood High