1697
Reference Description
https://www.cve.org/CVERecord?id=CVE-2012-3503
CVE-2010-2772 SCADA system uses a hard-coded password to protect back-end database
containing authorization information, exploited by Stuxnet worm
https://www.cve.org/CVERecord?id=CVE-2010-2772
CVE-2010-2073 FTP server library uses hard-coded usernames and passwords for three
default accounts
https://www.cve.org/CVERecord?id=CVE-2010-2073
CVE-2010-1573 Chain: Router firmware uses hard-coded username and password for access
to debug functionality, which can be used to execute arbitrary code
https://www.cve.org/CVERecord?id=CVE-2010-1573
CVE-2008-2369 Server uses hard-coded authentication key
https://www.cve.org/CVERecord?id=CVE-2008-2369
CVE-2008-0961 Backup product uses hard-coded username and password, allowing attackers
to bypass authentication via the RPC interface
https://www.cve.org/CVERecord?id=CVE-2008-0961
CVE-2008-1160 Security appliance uses hard-coded password allowing attackers to gain root
access
https://www.cve.org/CVERecord?id=CVE-2008-1160
CVE-2006-7142 Drive encryption product stores hard-coded cryptographic keys for encrypted
configuration files in executable programs
https://www.cve.org/CVERecord?id=CVE-2006-7142
CVE-2005-3716 VoIP product uses hard-coded public credentials that cannot be changed,
which allows attackers to obtain sensitive information
https://www.cve.org/CVERecord?id=CVE-2005-3716
CVE-2005-3803 VoIP product uses hard coded public and private SNMP community strings
that cannot be changed, which allows remote attackers to obtain sensitive
information
https://www.cve.org/CVERecord?id=CVE-2005-3803
CVE-2005-0496 Backup product contains hard-coded credentials that effectively serve as a
back door, which allows remote attackers to access the file system
https://www.cve.org/CVERecord?id=CVE-2005-0496
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 254 7PK - Security Features 700 2314
MemberOf 724 OWASP Top Ten 2004 Category A3 - Broken
Authentication and Session Management
711 2335
MemberOf 753 2009 Top 25 - Porous Defenses 750 2353
MemberOf 803 2010 Top 25 - Porous Defenses 800 2355
MemberOf 812 OWASP Top Ten 2010 Category A3 - Broken
Authentication and Session Management
809 2357
MemberOf 861 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 18 - Miscellaneous (MSC)
844 2370
MemberOf 866 2011 Top 25 - Porous Defenses 900 2372
MemberOf 884 CWE Cross-section 884 2567
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1152 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 49. Miscellaneous (MSC)
1133 2453
CWE Version 4.14
CWE-798: Use of Hard-coded Credentials
CWE-798: Use of Hard-coded Credentials