CVE-2016-2333: Undefined Security Weakness

SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another...

CVE-2015-2998

SysAid Help Desk (before version 15.2) is affected by CVE-2015-2998 due to a hardcoded encryption key used to encrypt sensitive data. The vulnerability allows remote attackers to obtain sensitive information by decrypting the database password stored in WEB-INF/conf/serverConf.xml, as demonstrate...

CVE-2015-2998: Exposure of Sensitive Information to an Unauthorized Actor

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstrated by decrypting the database password in WEB-INF/conf/serverConf.xml...

PT-2015-6042

Name of the Vulnerable Software and Affected Versions SysAid Help Desk versions prior to 15.2 Description The issue allows remote attackers to obtain sensitive information due to the use of a hardcoded encryption key. This can be demonstrated by decrypting the database password in the...

Siemens SIMATIC WinCC (TIA Portal) 13 < 13 SP1 Multiple Vulnerabilities (SSA-543623)

Binary data scadasiemenstiawinccmultiplevulnerabilitiesSSA-543623.nbin...

CVE-2015-1453

The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...

CVE-2015-1453

CVE-2015-1453 affects Fortinet FortiClient for Android 5.2.3.091, where the qm class uses a hardcoded encryption key (FoRtInEt!AnDrOiD). This enables an attacker to decrypt data stored in Shared Preferences and potentially obtain passwords or other sensitive data. The available sources describe t...

CVE-2015-1453: Undefined Security Weakness

The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which makes it easier for attackers to obtain passwords and possibly other sensitive data by leveraging the key to decrypt data in the Shared Preferences...

PT-2015-5293

Name of the Vulnerable Software and Affected Versions FortiClient version 5.2.3.091 Description The issue concerns the use of a hardcoded encryption key in the qm class, which can be leveraged by attackers to decrypt sensitive data, including passwords, stored in the Shared Preferences...

CVE-2014-4686: Undefined Security Weakness

The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product installation and then employing this key during...

PT-2013-4526

Name of the Vulnerable Software and Affected Versions Baramundi Management Suite versions 7.5 through 8.9 Description The issue involves an unspecified DLL file in the software that uses a hardcoded encryption key. This makes it easier for attackers to defeat cryptographic protection mechanisms b...

CVE-2013-3625: Undefined Security Weakness

An unspecified DLL file in Baramundi Management Suite 7.5 through 8.9 uses a hardcoded encryption key, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from a product installation elsewhere...

Cisco Unified Communications Manager multiple security vulnerabilities

Hardcoded encryption key, code execution, privilege escation, SQL injection...

PT-2013-1038

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC WinCC versions prior to 7.3 Description The issue concerns a hardcoded encryption key in the Project administration application. This allows remote attackers to obtain sensitive information by extracting the key from another...

EMC Smarts Network Configuration Manager security vulnerabilities

Hardcoded ecnryption key, default unauthenticated connections...

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

CVE-2012-4615

EMC Smarts Network Configuration Manager (NCM) prior to version 9.1 is affected by CVE-2012-4615 due to a hard-coded encryption key used to store credentials, enabling local users to obtain sensitive information via unspecified vectors. The related security advisory(ESA-2012-057) notes this and r...

CVE-2012-4615

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...

PT-2012-5519

Name of the Vulnerable Software and Affected Versions EMC Smarts Network Configuration Manager NCM versions prior to 9.1 Description The issue allows local users to obtain sensitive information due to the use of a hardcoded encryption key for storing credentials. Recommendations For versions prio...

CVE-2012-4615: Undefined Security Weakness

EMC Smarts Network Configuration Manager NCM before 9.1 uses a hardcoded encryption key for the storage of credentials, which allows local users to obtain sensitive information via unspecified vectors...