Vulnerabilities > Use of Hard-coded Cryptographic Key

DATE CVE VULNERABILITY TITLE RISK
2025-02-11 CVE-2024-13842 Use of Hard-coded Cryptographic Key vulnerability in Ivanti Connect Secure 22.7/7.1/7.4
A hardcoded key in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.3 allows a local authenticated attacker with admin privileges to read sensitive data.
local
low complexity
ivanti CWE-321
4.4
4.4
2024-11-12 CVE-2024-46889 Use of Hard-coded Cryptographic Key vulnerability in Siemens Sinec INS 1.0
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3).
network
low complexity
siemens CWE-321
5.3
5.3
2024-10-24 CVE-2024-38314 IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic key to an attacker that has compromised environment.
network
high complexity
CWE-321
5.9
5.9
2024-08-22 CVE-2024-42418 Use of Hard-coded Cryptographic Key vulnerability in Avtecinc Outpost 0810 Firmware and Outpost Uploader Utility
Avtec Outpost uses a default cryptographic key that can be used to decrypt sensitive information.
network
low complexity
avtecinc CWE-321
7.5
7.5