The product contains hard-coded credentials, such as a password or cryptographic key.
1,719 vulnerabilities with CWE-798
CVE-2021-43052
CRITICAL
TIBCO FTL < 6.7.2 - Authentication Bypass via Hard-coded Realm Server Secret
CVSS 9.3
CVE-2021-45033
HIGH
Siemens CP-8000 and CP-8022 Master Modules < 16.20 - Hard-coded Credentials in Debug Port
CVSS 8.8
CVE-2021-45458
HIGH
Apache Kylin <2.6.6, <3.1.2 - Info Disclosure
CVSS 7.5
CVE-2021-45913
HIGH
ControlUp Real-Time Agent <8.2.5 - Command Injection
CVSS 7.2
CVE-2021-45732
HIGH
Netgear Nighthawk R6700 <1.0.4.120 - Info Disclosure
CVSS 8.8
CVE-2021-20170
HIGH
Netgear RAX43 1.0.3.96 - Use of Hard-coded Credentials in Configuration Backup
CVSS 8.8
CVE-2021-20155
CRITICAL
Trendnet TEW-827DRU 2.08B01 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2021-20132
HIGH
D-Link DIR-2640-US Firmware <= 1.11b02 - Use of Hard-coded Credentials in Quagga Services
CVSS 8.8
CVE-2021-35232
MEDIUM
SolarWinds Web Help Desk - Info Disclosure
CVSS 6.8
CVE-2021-32993
HIGH
Philips IntelliBridge EC40 and EC80 Firmware < c.00.04 - Use of Hard-coded Credentials
CVSS 8.1
CVE-2021-45522
MEDIUM
NETGEAR XR1000 Firmware < 1.0.0.58 - Use of Hard-coded Credentials
CVSS 6.1
CVE-2021-45521
HIGH
NETGEAR RBK352/RBR350/RBS350 < 4.4.0.10 - Use of Hard-coded Credentials
CVSS 7.4
CVE-2021-45520
CRITICAL
NETGEAR RBK352/RBR350/RBS350 < 4.4.0.10 - Use of Hard-coded Credentials
CVSS 9.6
CVE-2021-44207
HIGH
KEV
Acclaim USAHERDS <= 7.4.0.1 - Use of Hard-coded Credentials
CVSS 8.1
CVE-2021-41028
HIGH
FortiClientEMS <7.0.1-6.4.6 - Man-in-the-Middle
CVSS 8.2
CVE-2021-26108
HIGH
FortiOS < 5.6.13 - Use of Hard-coded Cryptographic Key in SSLVPN
CVSS 7.5
CVE-2021-43044
CRITICAL
Kaseya Unitrends Backup <10.5.5 - Info Disclosure
CVSS 9.8
CVE-2021-43284
HIGH
Victure WR1200 <1.0.3 - Privilege Escalation
CVSS 7.8
CVE-2021-43282
MEDIUM
Victure WR1200 <1.0.3 - Info Disclosure
CVSS 6.5
CVE-2021-26611
HIGH
HejHome GKW-IC052 Firmware - Use of Hard-coded Credentials
CVSS 8.1
CVE-2021-40519
CRITICAL
Airangel HSMX Gateway <5.2.04 - Info Disclosure
CVSS 10.0
CVE-2021-43136
CRITICAL
FormaLMS <= 2.4.4 - Authentication Bypass via Hard-coded Credentials
CVSS 9.8
CVE-2021-43575
MEDIUM
KNX ETS6 through 6.0.0 - Use of Hard-coded Credentials
CVSS 5.5
CVE-2021-40119
CRITICAL
Cisco Policy Suite - Privilege Escalation
CVSS 9.8
CVE-2021-38461
HIGH
Auvesy versiondog <= 8.0.0 - Hard-coded Encryption Key
CVSS 8.2
Details
Vulnerabilities
1,719
Exploit Likelihood
High