The product contains hard-coded credentials, such as a password or cryptographic key.
1,712 vulnerabilities with CWE-798
CVE-2025-1879
LOW
i-Drive i11-i12 <20250227 - Hard-Coded Credentials
CVSS 2.4
CVE-2025-25570
CRITICAL
Vue Vben Admin - Default Credentials
CVSS 9.8
CVE-2025-26410
CRITICAL
Wattsense Bridge < 6.4.1 - Use of Hard-coded Credentials via Serial Interface
CVSS 9.8
CVE-2025-1143
HIGH
Billion Electric Router - Privilege Escalation
CVSS 8.4
CVE-2024-46508
HIGH
yeti-platform <2.1.12 - Auth Bypass
CVSS 7.5
CVE-2024-55027
HIGH
Weintek cMT-3072XH2 v2.1.53 - Info Disclosure
CVSS 7.5
CVE-2024-55023
MEDIUM
Weintek cMT-3072XH2 v2.1.53 - Info Disclosure
CVSS 5.3
CVE-2024-55021
HIGH
Weintek cMT-3072XH2 v2.1.53 - Auth Bypass
CVSS 7.5
CVE-2024-48842
HIGH
ABB FLXEON <9.3.5 - Info Disclosure
CVSS 7.0
CVE-2024-38648
MEDIUM
Ivanti DSM <2024.2 - Info Disclosure
CVSS 5.7
CVE-2024-13688
MEDIUM
Admin and Site Enhancements WordPress Plugin < 7.6.10 - Hardcoded Credentials Bypass via Password Protection Feature
CVSS 5.3
CVE-2024-41794
CRITICAL
SENTRON 7KT PAC1260 Data Manager - Use of Hard-coded Credentials
CVSS 10.0
CVE-2024-13773
HIGH
Civi - Job Board & Freelance Marketplace <2.1.4 - Info Disclosure
CVSS 7.3
CVE-2024-9334
HIGH
E-Kent Pallium Vehicle Tracking <17.10.2024 - Auth Bypass
CVSS 8.2
CVE-2024-57040
CRITICAL
TP-Link TL-WR845N Firmware < 250401 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-50688
CRITICAL
SunGrow iSolarCloud < 2.1.6.20241104 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-52902
HIGH
IBM Cognos Controller 11.0.0-11.0.1 FP3 and IBM Controller 11.1.0 - Use of Hard-coded Credentials
CVSS 8.8
CVE-2024-8893
HIGH
GoodWe Technologies Co., Ltd. GW1500-XS - Info Disclosure
CVSS 7.3
CVE-2024-57790
MEDIUM
IXon IXrouter IX2400 <3.0 - Privilege Escalation
CVSS 5.4
CVE-2024-28989
MEDIUM
SolarWinds Web Help Desk - Info Disclosure
CVSS 5.5
CVE-2024-46436
HIGH
Tenda W18E V16.01.0.8(1625) - Unauthenticated Remote Root Access via Hardcoded Telnet Credentials
CVSS 8.3
CVE-2024-46433
HIGH
Tenda W18E V16.01.0.8(1625) - Unauthenticated Default Credentials Use
CVSS 8.8
CVE-2024-46429
HIGH
Tenda W18E V16.01.0.8(1625) - Unauthenticated Hardcoded Credentials
CVSS 8.8
CVE-2024-36556
CRITICAL
Forever KidsWatch - Hardcoded Password
CVSS 9.1
CVE-2024-51547
CRITICAL
ABB ASPECT-Enterprise, NEXUS Series, MATRIX Series < 3.08.03 - Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities
1,712
Exploit Likelihood
High