Installation script has a hard-coded secret token value, allowing attackers to bypass authentication
CVE-2010-2772
SCADA system uses a hard-coded password to protect back-end database containing authorization information, exploited by Stuxnet worm
CVE-2010-2073