The product contains hard-coded credentials, such as a password or cryptographic key.
1,755 vulnerabilities with CWE-798
CVE-2024-6890
HIGH
Journyx - Unauthenticated Password Reset Token Brute-Force via Insecure Randomness
CVSS 8.8
CVE-2024-41616
CRITICAL
D-Link DIR-300 REVA - Info Disclosure
CVSS 9.8
CVE-2024-39838
HIGH
ZWX-2000CSW2-HN Firmware < 0.3.15 - Use of Hard-coded Credentials
CVSS 8.8
CVE-2024-33895
MEDIUM
Ewon Cosy+ Firmware 21.x < 21.2s10 and 22.x < 22.1s3 - Use of Hard-coded Credentials
CVSS 6.6
CVE-2024-7332
CRITICAL
TOTOLINK CP450 4.1.0cu.747_B20191224 - Hard-Coded Password
CVSS 9.8
CVE-2024-41611
CRITICAL
D-Link DIR-860L REVA FIRMWARE PATCH 1.10..B04 - Use of Hard-coded Credentials in Telnet Service
CVSS 9.8
CVE-2024-41610
CRITICAL
D-Link DIR-820LW REVB Firmware 2.03.B01_TC - Use of Hard-coded Credentials in Telnet Service
CVSS 9.8
CVE-2024-7170
LOW
TOTOLINK A3000RU 5.9c.5185 - Use of Hard-Coded Password
CVSS 3.5
CVE-2024-7155
LOW
TOTOLINK A3300R 17.0.0cu.557_B20221024 - Info Disclosure
CVSS 2.5
CVE-2024-41689
MEDIUM
SyroTech SY-GPON-1110-WDONT Router - Cleartext Storage of WPA/WPS Credentials
CVSS 4.6
CVE-2024-6912
CRITICAL
PerkinElmer ProcessPlus <= 1.11.6507.0 - Use of Hard-coded MSSQL Credentials
CVSS 9.8
CVE-2024-5471
HIGH
ManageEngine DDI Central < 4002 - Agent Takeover via Hard-coded Credentials
CVSS 8.8
CVE-2024-35338
CRITICAL
Tendacn I29 Firmware - Hard-coded Credentials
CVSS 9.8
CVE-2024-5810
MEDIUM
WP2Speed Faster - Unauthorized Access
CVSS 5.3
CVE-2024-28751
CRITICAL
Product <Version> - Privilege Escalation
CVSS 9.1
CVE-2024-28747
CRITICAL
ifm Smart PLC AC14xx and AC4xxS Firmware < V4.3.17 - Unauthenticated Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-4708
CRITICAL
mySCADA myPRO < 8.31.0 - Remote Code Execution via Hard-coded Password
CVSS 9.8
CVE-2024-38480
MEDIUM
Piccoma App for Android and iOS < 6.20.0 - Hard-coded API Key Exposure
CVSS 4.0
CVE-2024-39208
CRITICAL
luci-app-lucky v2.8.3 - Info Disclosure
CVSS 9.8
CVE-2024-39374
CRITICAL
marKoni D Compact and DH Exciter+Amplifiers Firmware < 2.0.1 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-0949
CRITICAL
Talya Informatics Elektraweb <17.0.68 - Auth Bypass
CVSS 9.8
CVE-2024-33329
HIGH
Lumisxp 15.0.x-16.1.x - Unauthenticated Authentication Bypass via Hardcoded Credentials
CVSS 7.5
CVE-2024-5460
HIGH
Brocade Fabric OS < 9.0.0 - Authenticated Data Exposure via SNMP Default Community String
CVSS 8.1
CVE-2024-36496
HIGH
Faronics WINSelect - Information Disclosure via Static Encryption Key
CVSS 7.5
CVE-2024-36480
CRITICAL
Ricoh Streamline NX PC Client <3.7.2 - Privilege Escalation
CVSS 9.8
Details
Vulnerabilities
1,755
Exploit Likelihood
High