CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,721 vulnerabilities with CWE-798
CVE-2018-8870 MEDIUM
Medtronic 24950-24952 - Privilege Escalation
CVSS 6.4
CVE-2018-12924 CRITICAL
eztcp CIE-H10/H12/H14 and CSE-M53N/M32/M24/M73/B63N2 Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-4846 CRITICAL
Siemens RAPIDPoint 400/500 and RAPIDLab 1200 Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-12526 CRITICAL
Telesquare SDT-CS3B1/SDT-CW3B1 <1.2.0 - Info Disclosure
CVSS 9.8
CVE-2018-6213 CRITICAL
D-Link DIR-620 Firmware 1.0.3/1.0.37/1.3.1/1.3.3/1.3.7/1.4.0/2.0.22 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-6210 CRITICAL
D-Link DIR-620 Firmware 1.0.37 - Use of Hard-coded Credentials via TELNET
CVSS 9.8
CVE-2018-12323 MEDIUM
Momentum Axel 720P <5.1.8 - Info Disclosure
CVSS 6.8
CVE-2018-0329 MEDIUM
Cisco Wide Area Application Services - Unauthenticated SNMP Data Exposure via Hard-coded Community String
CVSS 5.3
CVE-2018-10966 HIGH
GamerPolls 0.4.6 - Session Hijacking via Hard-coded Secret in Passport.js
CVSS 7.3
CVE-2018-10813 HIGH
Dedos-web 1.0 - Use of Hard-coded Credentials in Express.js Session Secrets
CVSS 7.3
CVE-2018-11682 CRITICAL
Lutron Stanza, RadioRA 2, and HomeWorks QS Firmware - Use of Hard-coded Credentials via TELNET
CVSS 9.8
CVE-2018-11681 CRITICAL
Lutron Stanza, RadioRA 2, and HomeWorks QS Firmware - Use of Hard-coded Credentials via TELNET
CVSS 9.8
CVE-2018-11629 CRITICAL
Lutron Stanza, RadioRA 2, and HomeWorks QS Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-11482 CRITICAL
TP-LINK IPC TL-IPC223(P)-6, TL-IPC323K-D, TL-IPC325(KP)-*, TL-IPC40A-4 < 1.0.21 - Hard-coded Credentials
CVSS 9.8
CVE-2018-11311 CRITICAL
mySCADA myPRO 7 - Use of Hard-coded Credentials in myscadagate.exe
CVSS 9.1
CVE-2018-0222 CRITICAL
Cisco Digital Network Architecture Center < 1.1.3 - Unauthenticated Remote Code Execution via Default Credentials
CVSS 10.0
CVE-2018-11094 CRITICAL
Intelbras NCLOUD 300 1.0 - Unauthenticated Information Disclosure via ExportSettings.sh
CVSS 9.8
CVE-2018-9112 CRITICAL
Foxconn AP-FC4064-T Firmware - Use of Hard-coded Credentials and Privilege Escalation via Cookie Manipulation
CVSS 9.8
CVE-2018-10723 CRITICAL
Directus 6.4.9 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2018-8857 HIGH
Philips Brilliance CT <2.6.2 - Info Disclosure
CVSS 7.8
CVE-2018-10167 HIGH
TP-Link EAP/Omada Controller <2.6.0 - Privilege Escalation
CVSS 7.5
CVE-2018-6401 CRITICAL
Meross MSS110 Firmware < 1.1.24 - Unauthenticated Access via Hard-coded TELNET Credentials
CVSS 9.8
CVE-2018-10575 CRITICAL
WatchGuard AP100-AP200 <1.2.9.15 - Info Disclosure
CVSS 9.8
CVE-2018-10328 HIGH
Momentum Axel 720P <5.1.8 - Info Disclosure
CVSS 7.4
CVE-2018-7241 CRITICAL
Schneider Electric Modicon and BMXNOR0200 Controllers - Use of Hard-coded Credentials
CVSS 9.8
Details
Vulnerabilities 1,721
Exploit Likelihood High