Vulnerabilities > Use of Hard-coded Credentials

DATE CVE VULNERABILITY TITLE RISK
2018-03-08 CVE-2018-0141 Use of Hard-coded Credentials vulnerability in Cisco products
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system.
local
low complexity
cisco CWE-798
8.4
2018-03-02 CVE-2017-1787 Use of Hard-coded Credentials vulnerability in IBM Engineering Lifecycle Optimization - Publishing 2.1.2/6.0.5
IBM Publishing Engine 2.1.2 and 6.0.5 contains an undisclosed vulnerability that could allow a local user with administrative privileges to obtain hard coded user credentials.
local
low complexity
ibm CWE-798
6.7
2018-03-01 CVE-2018-7047 Use of Hard-coded Credentials vulnerability in Wowza Streaming Engine
An issue was discovered in the MBeans Server in Wowza Streaming Engine before 4.7.1.
network
low complexity
wowza CWE-798
critical
9.8
2018-02-26 CVE-2017-11634 Use of Hard-coded Credentials vulnerability in - Wireless IP Camera 360
An issue was discovered on Wireless IP Camera 360 devices.
network
low complexity
CWE-798
critical
9.8
2018-02-26 CVE-2017-11632 Use of Hard-coded Credentials vulnerability in - Wireless IP Camera 360
An issue was discovered on Wireless IP Camera 360 devices.
network
low complexity
CWE-798
critical
9.8
2018-02-23 CVE-2014-3205 Use of Hard-coded Credentials vulnerability in Seagate products
backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user.
network
low complexity
seagate CWE-798
critical
9.8
2018-02-20 CVE-2015-9254 Use of Hard-coded Credentials vulnerability in Datto products
Datto ALTO and SIRIS devices have a default VNC password.
network
low complexity
datto CWE-798
critical
9.8
2018-02-15 CVE-2017-12726 Use of Hard-coded Credentials vulnerability in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump 1.1/1.5/1.6
A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6.
network
low complexity
smiths-medical CWE-798
7.3
2018-02-15 CVE-2017-12725 Use of Hard-coded Credentials vulnerability in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump 1.1/1.5/1.6
A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6.
network
high complexity
smiths-medical CWE-798
5.6
2018-02-15 CVE-2017-12724 Use of Hard-coded Credentials vulnerability in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump 1.1/1.5/1.6
A Use of Hard-coded Credentials issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6.
network
high complexity
smiths-medical CWE-798
8.1