CWE-798

High likelihood

Use of Hard-coded Credentials

Parent: CWE-1391 - Use of Weak Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

1,722 vulnerabilities with CWE-798
CVE-2015-2867 CRITICAL
Trane ComfortLink II SCC firmware 2.0.2 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2014-125121 CRITICAL
Array Networks vAPV/vxAG <8.3.2.17-9.2.0.34 - Privilege Escalation
CVE-2014-125115 CRITICAL
Pandora FMS <5.0 SP2 - SQL Injection
CVE-2014-125030 MEDIUM
taoeffect Empress - Hard-Coded Password
CVSS 6.3
CVE-2014-9614 CRITICAL
Netsweeper <4.0.5 - Info Disclosure
CVSS 9.8
CVE-2014-0175 CRITICAL
marionette_collective - Use of Hard-coded Credentials
CVSS 9.8
CVE-2014-5431 MEDIUM
Baxter SIGMA Spectrum Infusion System 6.05 - Info Disclosure
CVSS 6.8
CVE-2014-5434 CRITICAL
Baxter SIGMA Spectrum Infusion System <6.05 - Info Disclosure
CVSS 9.8
CVE-2014-3413 CRITICAL
Juniper Junos Space - Use of Hard-coded Credentials in MySQL Server
CVSS 9.8
CVE-2014-6617 CRITICAL
Softing FG-100 PB PROFIBUS <FG-x00-PB_V2.02.0.00 - Info Disclosure
CVSS 9.8
CVE-2014-3205 CRITICAL
Seagate BlackArmor NAS 220 and 110 Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2014-8579 CRITICAL
TRENDnet TEW-823DRU Firmware < 1.00b30 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2014-8426 CRITICAL
Barracuda Load Balancer 5.0.0.015 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2014-9198
Schneider Electric ETG3000 - Auth Bypass
CVE-2014-2350
Emerson DeltaV 10.3.1 11.3 11.3.1 12.3 - Unauthenticated Hardcoded Credential Bypass via Diagnostic Services
CVE-2013-10002 MEDIUM
Telecomsoftware SAMwin Contact Center Suite 5.1 - Use of Hard-coded Credentials in SAMwinLIBVB.dll
CVSS 6.5
CVE-2013-6276 CRITICAL
QNAP VioCard and VioGate Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2013-6362 CRITICAL
Xerox ColorCube and WorkCenter Firmware - Use of Hard-coded Credentials
CVSS 9.8
CVE-2013-6277 HIGH
QNAP VioCard 300 Firmware - Use of Hard-coded Credentials
CVSS 7.5
CVE-2013-6236 CRITICAL
IZON IP 2.0.2 - Use of Hard-coded Credentials
CVSS 9.8
CVE-2013-1352 HIGH
Verax Network Management System < 2.1.0 - Use of Hard-coded Encryption Key
CVSS 7.5
CVE-2013-2572 HIGH
TP-LINK TL-SC 3130, TL-SC 3130G, TL-SC 3171G, TL-SC 4171G < 1.6.18p12 - Security Bypass via Hard-coded Credentials
CVSS 7.5
CVE-2013-2567 HIGH
Zavio IP Cameras <1.6.03 - Auth Bypass
CVSS 7.5
CVE-2013-1603 MEDIUM
D-Link DCS and WCS Firmware - Unauthenticated Remote Access via Hard-coded Credentials
CVSS 5.3
CVE-2013-3619 HIGH
Supermicro Onboard IPMI Static SSL Certificate Scanner
CVSS 8.1
Details
Vulnerabilities 1,722
Exploit Likelihood High