Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2019-02-12 CVE-2019-1688 Use of Hard-coded Credentials vulnerability in Cisco Network Assurance Engine 3.0(1)
A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gain unauthorized access or cause a Denial of Service (DoS) condition on the server.
local
low complexity
cisco CWE-798
7.1
2019-02-09 CVE-2009-5154 Use of Hard-coded Credentials vulnerability in Mobotix S14 Firmware Mxv4.2.1.61
An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.
network
low complexity
mobotix CWE-798
critical
9.8
2019-02-07 CVE-2019-1675 Use of Hard-coded Credentials vulnerability in Cisco products
A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor.
network
low complexity
cisco CWE-798
7.5
2019-02-05 CVE-2018-18998 Use of Hard-coded Credentials vulnerability in Lcds Laquis Scada 4.1/4.1.0.3391/4.1.0.3870
LCDS Laquis SCADA prior to version 4.1.0.4150 uses hard coded credentials, which may allow an attacker unauthorized access to the system with high privileges.
network
low complexity
lcds CWE-798
critical
9.8
2019-01-31 CVE-2018-5560 Use of Hard-coded Credentials vulnerability in Guardzilla Gz521W Firmware
A reliance on a static, hard-coded credential in the design of the cloud-based storage system of Practecol's Guardzilla All-In-One Video Security System allows an attacker to view the private data of all users of the Guardzilla device.
network
low complexity
guardzilla CWE-798
7.5
2019-01-24 CVE-2018-1959 Use of Hard-coded Credentials vulnerability in IBM Security Identity Manager
IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
local
low complexity
ibm CWE-798
7.8
2019-01-21 CVE-2019-6499 Use of Hard-coded Credentials vulnerability in Teradata Viewpoint 16.20.00.02B80
Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system.
network
high complexity
teradata CWE-798
8.1
2019-01-18 CVE-2019-3908 Use of Hard-coded Credentials vulnerability in Identicard Premisys ID 3.1.190
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files.
network
low complexity
identicard CWE-798
7.5
2019-01-18 CVE-2019-3906 Use of Hard-coded Credentials vulnerability in Identicard Premisys ID 3.1.190
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003.
network
low complexity
identicard CWE-798
8.8
2019-01-15 CVE-2019-0022 Use of Hard-coded Credentials vulnerability in Juniper Advanced Threat Prevention
Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software.
network
low complexity
juniper CWE-798
critical
9.8