Vulnerabilities > Use of Hard-coded Credentials
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-02-21 | CVE-2022-46637 | Use of Hard-coded Credentials vulnerability in Prolink2U Prs1841 Firmware UV2 Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services. | 9.8 |
2023-02-13 | CVE-2023-0808 | Use of Hard-coded Credentials vulnerability in multiple products A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. | 6.8 |
2023-02-11 | CVE-2022-34386 | Use of Hard-coded Credentials vulnerability in Dell products Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic weakness vulnerability. | 5.5 |
2023-02-11 | CVE-2022-34449 | Use of Hard-coded Credentials vulnerability in Dell Powerpath Management Appliance 3.2/3.3 PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. | 6.0 |
2023-02-10 | CVE-2022-45766 | Use of Hard-coded Credentials vulnerability in Keystorage Global Facilities Management Software 3.0 Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remote attackers to impact availability, confidentiality, accessibility and dependability of electronic key boxes. | 9.1 |
2023-02-09 | CVE-2023-21426 | Use of Hard-coded Credentials vulnerability in Samsung Android 10.0 Hardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows attackers to access cardemulation PIN. | 5.5 |
2023-02-06 | CVE-2021-36224 | Use of Hard-coded Credentials vulnerability in Westerndigital MY Cloud OS Western Digital My Cloud devices before OS5 have a nobody account with a blank password. | 9.8 |
2023-02-03 | CVE-2023-24147 | Use of Hard-coded Credentials vulnerability in Totolink Ca300-Poe Firmware 6.2C.884 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini. | 7.5 |
2023-02-03 | CVE-2023-24149 | Use of Hard-coded Credentials vulnerability in Totolink Ca300-Poe Firmware 6.2C.884 TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow. | 9.8 |
2023-02-03 | CVE-2023-24155 | Use of Hard-coded Credentials vulnerability in Totolink T8 Firmware V4.1.5Cu TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini. | 9.8 |