Security Vulnerabilities Related To CWE-321

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2022-0664	321		2022-02-18	2022-02-26	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.
2	CVE-2021-43587	321	+Priv	2021-12-21	2022-01-05	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to gain access to secrets and elevate to gain higher privileges.
3	CVE-2021-38461	321		2021-10-22	2021-10-27	6.4	None	Remote	Low	Not required	Partial	Partial	None
The affected product uses a hard-coded blowfish key for encryption/decryption processes. The key can be easily extracted from binaries.
4	CVE-2021-32520	321		2021-07-07	2021-09-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.
5	CVE-2021-27389	321		2021-04-22	2021-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection.
6	CVE-2020-28395	321		2021-01-12	2021-03-26	4.3	None	Remote	Medium	Not required	Partial	None	None
A vulnerability has been identified in SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.0). Devices do not create a new unique private key after factory reset. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
7	CVE-2020-28391	321		2021-01-12	2021-09-14	4.3	None	Remote	Medium	Not required	Partial	None	None
A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.5.0). Devices create a new unique key upon factory reset, except when used with C-PLUG. When used with C-PLUG the devices use the hardcoded private RSA-key shipped with the firmware-image. An attacker could leverage this situation to a man-in-the-middle situation and decrypt previously captured traffic.
8	CVE-2020-25234	321		2020-12-14	2020-12-16	3.6	None	Local	Low	Not required	Partial	Partial	None
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3), LOGO! Soft Comfort (All versions < V8.3). The LOGO! program files generated and used by the affected components offer the possibility to save user-defined functions (UDF) in a password protected way. This protection is implemented in the software that displays the information. An attacker could reverse engineer the UDFs directly from stored program files.
9	CVE-2019-10920	321		2019-05-14	2022-01-04	5.0	None	Remote	Low	Not required	Partial	None	None
A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Project data stored on the device, which is accessible via port 10005/tcp, can be decrypted due to a hardcoded encryption key. The security vulnerability could be exploited by an unauthenticated attacker with network access to port 10005/tcp. No user interaction is required to exploit this security vulnerability. The vulnerability impacts confidentiality of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.

Total number of vulnerabilities : 9 Page : 1 (This Page)