Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2020-05-18 CVE-2020-11549 Use of Hard-coded Credentials vulnerability in Netgear Rbs50Y Firmware, Srr60 Firmware and Srs60 Firmware
An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1.106, and Pro Tri-Band Business WiFi Router (SRR60) AC3000 V2.5.1.106.
low complexity
netgear CWE-798
8.8
2020-05-12 CVE-2020-5248 Use of Hard-coded Credentials vulnerability in Glpi-Project Glpi
GLPI before before version 9.4.6 has a vulnerability involving a default encryption key.
network
low complexity
glpi-project CWE-798
5.3
2020-05-07 CVE-2020-4429 Use of Hard-coded Credentials vulnerability in IBM Data Risk Manager
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account.
network
low complexity
ibm CWE-798
critical
9.8
2020-05-06 CVE-2020-3318 Use of Hard-coded Credentials vulnerability in Cisco Secure Firewall Management Center
Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account.
network
low complexity
cisco CWE-798
critical
9.8
2020-05-06 CVE-2020-3301 Use of Hard-coded Credentials vulnerability in Cisco Secure Firewall Management Center
Multiple vulnerabilities in Cisco Firepower Management Center (FMC) Software and Cisco Firepower User Agent Software could allow an attacker to access a sensitive part of an affected system with a high-privileged account.
local
low complexity
cisco CWE-798
4.4
2020-05-04 CVE-2020-12110 Use of Hard-coded Credentials vulnerability in Tp-Link products
Certain TP-Link devices have a Hardcoded Encryption Key.
network
low complexity
tp-link CWE-798
critical
9.8
2020-05-04 CVE-2020-12627 Use of Hard-coded Credentials vulnerability in Janeczku Calibre-Web 0.6.6
Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.
network
low complexity
janeczku CWE-798
critical
9.8
2020-04-29 CVE-2019-5622 Use of Hard-coded Credentials vulnerability in Accellion File Transfer Appliance 80540
Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.
network
low complexity
accellion CWE-798
critical
9.8
2020-04-23 CVE-2018-21137 Use of Hard-coded Credentials vulnerability in Netgear D3600 Firmware and D6000 Firmware
Certain NETGEAR devices are affected by a hardcoded password.
network
low complexity
netgear CWE-798
critical
9.8
2020-04-22 CVE-2019-6859 Use of Hard-coded Credentials vulnerability in Schneider-Electric products
A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.
network
low complexity
schneider-electric CWE-798
7.5