Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2021-05-20 CVE-2021-29691 Use of Hard-coded Credentials vulnerability in IBM Security Identity Manager 7.0.2
IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
network
low complexity
ibm CWE-798
7.5
2021-05-20 CVE-2021-28111 Use of Hard-coded Credentials vulnerability in Draeger X-Dock Firmware
Draeger X-Dock Firmware before 03.00.13 has Hard-Coded Credentials, leading to remote code execution by an authenticated attacker.
network
low complexity
draeger CWE-798
8.8
2021-05-17 CVE-2021-32454 Use of Hard-coded Credentials vulnerability in Sitel-Sa Remote Cap/Prx Firmware 5.2.01
SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password.
low complexity
sitel-sa CWE-798
8.8
2021-05-13 CVE-2021-20025 Use of Hard-coded Credentials vulnerability in Sonicwall Email Security Virtual Appliance
SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup.
local
low complexity
sonicwall CWE-798
7.8
2021-05-05 CVE-2021-20401 Use of Hard-coded Credentials vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
local
low complexity
ibm CWE-798
7.8
2021-05-05 CVE-2020-4932 Use of Hard-coded Credentials vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
local
low complexity
ibm CWE-798
7.8
2021-04-29 CVE-2020-21995 Use of Hard-coded Credentials vulnerability in Inim products
Inim Electronics Smartliving SmartLAN/G/SI <=6.x uses default hardcoded credentials.
network
low complexity
inim CWE-798
critical
9.8
2021-04-22 CVE-2021-27392 Use of Hard-coded Credentials vulnerability in Siemens Siveillance Video Open Network Bridge 2018/2019/2020
A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2).
network
low complexity
siemens CWE-798
8.8
2021-04-22 CVE-2021-0266 Use of Hard-coded Credentials vulnerability in Juniper Junos 20.2/20.3/20.4
The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services.
network
low complexity
juniper CWE-798
critical
9.8
2021-04-13 CVE-2019-10881 Use of Hard-coded Credentials vulnerability in Xerox products
Xerox AltaLink B8045/B8055/B8065/B8075/B8090, AltaLink C8030/C8035/C8045/C8055/C8070 with software releases before 103.xxx.030.32000 includes two accounts with weak hard-coded passwords which can be exploited and allow unauthorized access which cannot be disabled.
network
low complexity
xerox CWE-798
critical
9.8