CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,713 vulnerabilities with CWE-798
CVE-2024-27774 HIGH
Unitronics Unistream Unilogic - Info Disclosure
CVSS 7.5
CVE-2024-28194 CRITICAL
your_spotify < 1.8.0 - Authentication Bypass via Hardcoded JWT Secret
CVSS 9.1
CVE-2024-25731 HIGH
Elink Smart eSmartCam 2.1.5 - Use of Hard-coded AES Encryption Keys
CVSS 7.5
CVE-2024-24681 CRITICAL
Yealink Configuration Encrypt Tool <1.2 - Info Disclosure
CVSS 9.8
CVE-2024-1661 LOW
Totolink X6000R 9.4.0cu.852_B20230719 - Use of Hard-coded Credentials in /etc/shadow
CVSS 2.5
CVE-2024-1344 MEDIUM
LaborOfficeFree 19.10 - Use of Hard-coded Credentials in Database Configuration
CVSS 6.8
CVE-2024-0390 CRITICAL
inprax izzi_connect < 2024010401 - Use of Hard-coded MQTT Credentials
CVSS 9.8
CVE-2024-23816 CRITICAL
Siemens Location Intelligence < 4.3 - Unauthenticated Administrative Access via Hard-coded Secret
CVSS 9.8
CVE-2024-22313 MEDIUM
IBM Storage Defender - Resiliency Service 2.0 - Info Disclosure
CVSS 6.2
CVE-2024-22853 CRITICAL
D-LINK Go-RT-AC750 - Code Injection
CVSS 9.8
CVE-2024-21764 CRITICAL
Rapid SCADA < 5.8.4 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-1039 CRITICAL
Gessler GmbH WEB-MASTER Firmware - Improper Authentication via Hardcoded Credentials
CVSS 9.8
CVE-2024-24324 CRITICAL
TOTOLINK A8000RU v7.1cu.643_B20200521 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2024-23619 CRITICAL
IBM Merge Healthcare eFilm Workstation < 4.2 - Unauthenticated Hardcoded Credential Use
CVSS 9.8
CVE-2024-23453 MEDIUM
spooncast/spoon 7.11.1-8.6.0 - Hard-coded Credentials Exposure
CVSS 5.5
CVE-2024-23842 HIGH
Hitron LGUVR-16H Firmware 1.02-4.02 - Unauthenticated Network Attack via Default Credentials
CVSS 7.4
CVE-2024-22772 HIGH
Hitron Systems DVR LGUVR-8H <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22771 HIGH
Hitron Systems DVR LGUVR-4H <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22770 HIGH
Hitron Systems DVR HVR-16781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22769 HIGH
Hitron Systems DVR HVR-8781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-22768 HIGH
Hitron Systems DVR HVR-4781 <4.02 - Info Disclosure
CVSS 7.4
CVE-2024-23726 HIGH
Ubee DDW365 XCNDDW365 - Use of Hard-coded Credentials via Predictable WPA2 PSK
CVSS 8.8
CVE-2024-23687 CRITICAL
FOLIO mod-data-export-spring <1.5.4 and 2.0.0-2.0.2 - Unauthenticated Use of Hard-coded Credentials
CVSS 9.1
CVE-2024-23685 MEDIUM
mod-remote-storage <1.7.2 and 2.0.0-2.0.3 - Unauthenticated Unauthorized Data Access via Hard-coded Credentials
CVSS 5.3
CVE-2023-27573 CRITICAL
netbox-docker < 2.5.0 - Use of Default Credentials
CVSS 9.0
Details
Vulnerabilities 1,713
Exploit Likelihood High