CWE-1393 Use of Default Password
baseThe product uses default passwords for potentially critical functionality.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (49)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-45249US | critical9.8OT critical | KEV | ||
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructur… | ||||
| CVE-2025-14917US | critical9.8OT elevated | — | ||
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty could provide weaker than expected security when administering securit… | ||||
| CVE-2026-24429US | critical9.8OT elevated | — | ||
Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) ship with a predefined default password for a built-in authentication account that is not required to… | ||||
| CVE-2025-66050US | critical9.8OT elevated | — | ||
Vivotek IP7137 camera with firmware version 0200a by default dos not require to provide any password when logging in as an administrator. While it is possible to set up such a pass… | ||||
| CVE-2023-24049US | critical9.8OT elevated | — | ||
An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management. | ||||
| CVE-2023-32090US | critical9.8OT elevated | — | ||
Pega platform clients who are using versions 6.1 through 7.3.1 may be
utilizing default credentials
| ||||
| CVE-2023-28094US | critical9.8OT elevated | — | ||
Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be utilizing default credentials. | ||||
| CVE-2023-25131US | critical9.8OT elevated | — | ||
Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Business Management for Windows v4.8.6 and earlier, PowerPanel… | ||||
| CVE-2022-4126US | critical9.8OT elevated | — | ||
Use of Default Password vulnerability in ABB RCCMD on Windows, Linux, MacOS allows Try Common or Default Usernames and Passwords.This issue affects RCCMD: before 4.40 230207.
| ||||
| CVE-2024-49559US | high8.8OT elevated | — | ||
Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Use of Default Password vulnerability. A low privileged attacker with remote access… | ||||
| CVE-2026-114087US | high8.1OT elevated | — | ||
Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_L… | ||||
| CVE-2025-2347US | high7.8OT elevated | — | ||
A vulnerability was found in IROAD Dash Cam FX2 up to 20250308 and classified as problematic. This issue affects some unknown processing of the component Device Registration. The m… | ||||
| CVE-2023-43042US | high7.5OT elevated | — | ||
IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords for a privileged user. IBM X-Force ID: 266874. | ||||
| CVE-2025-43799US | medium6.5OT elevated | — | ||
Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 3… | ||||
| CVE-2026-112030US | medium6.3OT elevated | — | ||
A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation resu… | ||||
| CVE-2025-43021US | medium5.7OT elevated | — | ||
A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vulnerability could allow the use and retrieval of the default… | ||||
| CVE-2026-16755US | medium5.3OT elevated | — | ||
A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive… | ||||
| CVE-2026-82698US | medium5.3OT elevated | — | ||
A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. This affects an unknown function of the file aca.sql. Performing… | ||||
| CVE-2026-8672US | medium5.1OT elevated | — | ||
Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.
This issue affects Avantra: before 25.… | ||||
| CVE-2026-3186US | medium4.3OT elevated | — | ||
A vulnerability was determined in feiyuchuixue sz-boot-parent up to 1.3.2-beta. Affected by this vulnerability is an unknown functionality of the file /api/admin/sys-user/reset/pas… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan