Vulnerabilities > Use of Hard-coded Credentials
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-12 | CVE-2023-27169 | Use of Hard-coded Credentials vulnerability in Xpand-It Write-Back Manager 2.3.1 Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. | 6.5 |
| 2023-09-07 | CVE-2023-39420 | Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation 5.3.2.15 The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL file. | 8.8 |
| 2023-09-07 | CVE-2023-39421 | Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation 5.4.1.23 The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage. | 7.7 |
| 2023-09-07 | CVE-2023-39422 | Use of Hard-coded Credentials vulnerability in Resortdata Internet Reservation Module Next Generation The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens. | 9.8 |
| 2023-09-06 | CVE-2023-32619 | Use of Hard-coded Credentials vulnerability in Tp-Link Archer C50 V3 Firmware and Archer C55 Firmware Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use hard-coded credentials to login to the affected device, which may allow a network-adjacent unauthenticated attacker to execute an arbitrary OS command. | 8.8 |
| 2023-09-05 | CVE-2023-41508 | Use of Hard-coded Credentials vulnerability in Superstorefinder Super Store Finder 3.6 A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel. | 9.8 |
| 2023-09-02 | CVE-2023-39982 | Use of Hard-coded Credentials vulnerability in Moxa Mxsecurity 1.0/1.0.1 A vulnerability has been identified in MXsecurity versions prior to v1.0.1. | 5.9 |
| 2023-08-31 | CVE-2023-31173 | Use of Hard-coded Credentials vulnerability in Selinc Sel-5037 SEL Grid Configurator Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. See Instruction Manual Appendix A and Appendix E dated 20230615 for more details. This issue affects SEL-5037 SEL Grid Configurator: before 4.5.0.20. | 8.4 |
| 2023-08-29 | CVE-2023-23770 | Use of Hard-coded Credentials vulnerability in Motorola Mbts Site Controller Firmware R05.32.58 Motorola MBTS Site Controller accepts hard-coded backdoor password. | 9.8 |
| 2023-08-29 | CVE-2023-23771 | Use of Hard-coded Credentials vulnerability in Motorola Mbts Base Radio Firmware R05.X2.57 Motorola MBTS Base Radio accepts hard-coded backdoor password. | 8.4 |