CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,755 vulnerabilities with CWE-798
CVE-2024-6045 HIGH
D-Link Multiple Models < 1.10.01/1.10.02/1.20.01 - Unauthenticated Hard-coded Credentials Exposure via Telnet Backdoor
CVSS 8.8
CVE-2024-38466 CRITICAL
Shenzhen Guoxin Synthesis <8.3.0 - Info Disclosure
CVSS 9.8
CVE-2024-27170 HIGH
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Hard-coded Credentials for WebDAV Access
CVSS 7.4
CVE-2024-27168 HIGH
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Hard-coded Credentials
CVSS 7.1
CVE-2024-27161 MEDIUM
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Hard-coded Credentials
CVSS 6.2
CVE-2024-27160 MEDIUM
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Hard-coded Credentials for Log Encryption
CVSS 6.2
CVE-2024-27159 MEDIUM
Toshiba Tec e-Studio multi-function peripheral (MFP) - Use of Hard-coded Credentials for Log Encryption
CVSS 6.2
CVE-2024-37630 HIGH
D-Link DIR-605L v2.13B01 - Use of Hard-coded Credentials in /etc/passwd
CVSS 8.8
CVE-2024-38281 CRITICAL
Motorola Vigilant Fixed LPR COMS Box Firmware <= 3.1.171.9 - Hardcoded Credentials
CVSS 9.8
CVE-2024-0865 HIGH
EcoStruxure IT Gateway < 1.21.0 - Local Privilege Escalation via Hard-coded Credentials
CVSS 7.8
CVE-2024-29855 CRITICAL
Veeam Recovery Orchestrator - Auth Bypass
CVSS 9.0
CVE-2024-3700 CRITICAL
Estomed Sp. z o.o. Simple Care - Info Disclosure
CVSS 9.8
CVE-2024-3699 CRITICAL
drEryk Gabinet <9.17.0.0 - Info Disclosure
CVSS 9.8
CVE-2024-1228 CRITICAL
Eurosoft Przychodnia <20240417.001 - Info Disclosure
CVSS 9.8
CVE-2024-3408 CRITICAL
D-Tale RCE
CVSS 9.8
CVE-2024-29170 HIGH
Dell PowerScale OneFS 8.2.0-9.8.0.0 - Use of Hard-coded Credentials
CVSS 8.1
CVE-2024-36782 CRITICAL
TOTOLINK CP300 V2.0.4-B20201102 - Info Disclosure
CVSS 9.8
CVE-2024-5514 CRITICAL
MinMax CMS - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-36049 MEDIUM
Aptos Wisal Payroll Accounting <7.1.6 - Info Disclosure
CVSS 6.5
CVE-2024-35396 CRITICAL
TOTOLINK CP900L v4.1.5cu.798_B20221228 - Hardcoded Password for Telnet
CVSS 9.8
CVE-2024-32988 HIGH
OfferBox <2.3.17-2.6.14 - Info Disclosure
CVSS 7.5
CVE-2024-4844 HIGH
Trellix ePO <5.10 SP1U2 - Info Disclosure
CVSS 7.5
CVE-2024-32053 CRITICAL
CyberPower PowerPanel - Info Disclosure
CVSS 9.8
CVE-2024-27107 CRITICAL
GE HealthCare EchoPAC - Info Disclosure
CVSS 9.6
CVE-2024-32740 CRITICAL
SIMATIC CN 4100 < 3.0 - Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities 1,755
Exploit Likelihood High