CVE-2023-0391: Use of Hard-coded Cryptographic Key

MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel. This behavior was observed in version 2.2.0. There has been no indication from the vendor this has been addressed in version 2.2.1...

CVE-2023-27583 Panindex uses hard coded cyptographic key

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key PanIndex is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, on...

CVE-2023-0355

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information...

Hardcoded credentials

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information...

CVE-2023-0355

CVE-2023-0355 affects the Akuvox E11 doorbell camera. The vulnerability is described as the use of a hard-coded cryptographic key , which could allow an attacker to decrypt sensitive information. The CVE entry does not provide exploit details. The related ics advisory (IcsA-23-068-01) characteriz...

CVE-2023-0355 CVE-2023-0355

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information...

CVE-2023-0355 CVE-2023-0355

Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information...

PT-2023-16207 · Akuvox · Akuvox E11

Name of the Vulnerable Software and Affected Versions: Akuvox E11 affected versions not specified Description: The issue concerns the use of a hard-coded cryptographic key, which could potentially allow an attacker to decrypt sensitive information. Recommendations: At the moment, there is no...

Policy Manager Privilege Escalation

The vulnerability of the access control mechanism in the Policy Manager software for remote IT support and monitoring in Dell Secure Connect Gateway SCG is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to increase their...

Policy Manager Privilege Escalation

The vulnerability of the access control mechanism in the Policy Manager software for remote IT support and monitoring in Dell Secure Connect Gateway SCG is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker to increase their...

CVE-2023-20016: Use of Hard-coded Cryptographic Key

A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup...

SUSE CVE-2006-0095

dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key...

SUSE CVE-2015-7200

The CryptoKey interface implementation in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 lacks status checking, which allows attackers to have an unspecified impact via vectors related to a cryptographic key...

CVE-2023-21705: Use of Hard-coded Cryptographic Key

Microsoft SQL Server Remote Code Execution Vulnerability...

CVE-2022-34386: Use of Hard-coded Cryptographic Key

Dell SupportAssist for Home PCs version 3.11.4 and prior and SupportAssist for Business PCs version 3.2.0 and prior contain cryptographic weakness vulnerability. An authenticated non-admin user could potentially exploit the issue and obtain sensitive information...

Siemens SCALANCE X Switches Use of Hard-Coded Cryptographic Key (CVE-2020-28391)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants All versions V5.2.5, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.5.0, SCALANCE X-200RNA switch family All versions V3.2.7. Devices create a new unique key upon factory reset...

CVE-2023-20038: Use of Hard-coded Cryptographic Key

A vulnerability in the monitoring application of Cisco Industrial Network Director could allow an authenticated, local attacker to access a static secret key used to store both local data and credentials for accessing remote systems. This vulnerability is due to a static key value stored in the...

CVE-2022-34442

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain LDAP user privileges...

CVE-2022-34442

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contains a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain LDAP user privileges...

CVE-2022-34442

Dell EMC SCG Policy Manager (Policy Manager) versions 5.10–5.12 contain a hard-coded cryptographic key vulnerability. An attacker with knowledge of the hard-coded data could exploit it to log in and gain LDAP user privileges. Connected sources corroborate the affected versions and the privilege/e...