Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2023-09-07 CVE-2023-39422 Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation
The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens.
network
low complexity
resortdata CWE-798
critical
9.8
2023-09-06 CVE-2023-32619 Use of Hard-coded Credentials vulnerability in Tp-Link Archer C50 V3 Firmware and Archer C55 Firmware
Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command.
low complexity
tp-link CWE-798
8.8
2023-09-05 CVE-2023-41508 Use of Hard-coded Credentials vulnerability in Superstorefinder Super Store Finder 3.6
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.
network
low complexity
superstorefinder CWE-798
critical
9.8
2023-09-02 CVE-2023-39982 Use of Hard-coded Credentials vulnerability in Moxa Mxsecurity 1.0/1.0.1
A vulnerability has been identified in MXsecurity versions prior to v1.0.1.
network
high complexity
moxa CWE-798
5.9
2023-08-31 CVE-2023-31173 Use of Hard-coded Credentials vulnerability in Selinc Sel-5037 SEL Grid Configurator
Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20.
local
low complexity
selinc CWE-798
8.4
2023-08-29 CVE-2023-23770 Use of Hard-coded Credentials vulnerability in Motorola Mbts Site Controller Firmware R05.32.58
Motorola MBTS Site Controller accepts hard-coded backdoor password.
network
low complexity
motorola CWE-798
critical
9.8
2023-08-29 CVE-2023-23771 Use of Hard-coded Credentials vulnerability in Motorola Mbts Base Radio Firmware R05.X2.57
Motorola MBTS Base Radio accepts hard-coded backdoor password.
local
low complexity
motorola CWE-798
8.4
2023-08-28 CVE-2023-38024 Use of Hard-coded Credentials vulnerability in Myspotcam FHD 2 Firmware
SpotCam Co., Ltd.
network
low complexity
myspotcam CWE-798
critical
9.8
2023-08-28 CVE-2023-38026 Use of Hard-coded Credentials vulnerability in Myspotcam FHD 2 Firmware
SpotCam Co., Ltd.
network
low complexity
myspotcam CWE-798
critical
9.8
2023-08-24 CVE-2023-32077 Use of Hard-coded Credentials vulnerability in Gravitl Netmaker
Netmaker makes networks with WireGuard.
network
low complexity
gravitl CWE-798
7.5