CWE-257 Storing Passwords in a Recoverable Format
baseThe storage of passwords in a recoverable format makes them subject to password reuse attacks by malicious users. In fact, it should be noted that recoverable encrypted passwords provide no significant benefit over plaintext passwords since they are subject not only to reuse by malicious attackers but also by malicious insiders. If a system administrator can recover a password directly, or use a brute force search on the available information, the administrator can use the password on other accounts.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (83)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-20128US | —OT critical | KEV | ||
A vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain DCA user privileges on an affect… | ||||
| CVE-2017-7903US | critical9.8 | — | ||
A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and… | ||||
| CVE-2023-0353US | critical9.8 | — | ||
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the co… | ||||
| CVE-2022-32519US | critical9.8 | — | ||
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-… | ||||
| CVE-2022-34838US | high8.4 | — | ||
Storing Passwords in a Recoverable Format vulnerability in ABB Zenon 8.20 allows an attacker who successfully exploit the vulnerability may add or alter data points and correspondi… | ||||
| CVE-2023-38738US | high8.1 | — | ||
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authenticati… | ||||
| CVE-2017-9942US | high7.8 | — | ||
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to the SiPass integrated server or SiPass int… | ||||
| CVE-2016-8566US | high7.8 | — | ||
An issue was discovered in Siemens SICAM PAS before 8.00. Because of Storing Passwords in a Recoverable Format, an authenticated local attacker with certain privileges could possib… | ||||
| CVE-2025-58049US | high7.5 | — | ||
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, an… | ||||
| CVE-2025-44958US | high7.5 | — | ||
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. | ||||
| CVE-2025-27459US | high7.5 | — | ||
The VNC application stores its passwords encrypted within the registry but uses DES for encryption. As DES is broken, the original passwords can be recovered. | ||||
| CVE-2019-16638US | high7.5OT elevated | — | ||
An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGO… | ||||
| CVE-2024-32042US | high7.5 | — | ||
The key used to encrypt passwords stored in the database can be found in
the
CyberPower PowerPanel
application code, allowing the passwords to be recovered. | ||||
| CVE-2024-3543US | high7.5 | — | ||
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be… | ||||
| CVE-2023-5627US | high7.5OT elevated | — | ||
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive i… | ||||
| CVE-2021-35050US | high7.5 | — | ||
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could… | ||||
| CVE-2021-27485US | high7.5 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credential… | ||||
| CVE-2022-47376US | high7.3 | — | ||
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although s… | ||||
| CVE-2019-3736US | high7.2OT elevated | — | ||
Dell EMC Integrated Data Protection Appliance versions prior to 2.3 contain a password storage vulnerability in the ACM component. A remote authenticated malicious user with root p… | ||||
| CVE-2018-10622US | high7.1 | — | ||
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials for network authentication. | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan