CWE-259
221 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Use of Hard-coded Password
The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components.
CVEs (221)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Sinapsitech 4Esolar Duo Photovoltaic System Monitor Esolar Light Photovoltaic System MonitorEsolar Photovoltaic System Monitor+1 moreApr 29, 2026 Nov 23, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the at...Show more |