Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1391: Use of Weak Credentials

Class Incomplete

The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.

How to prevent it (1 mitigation)

  1. Architecture and Design, Operation

    When the user changes or sets a password, check
    the password against a database of already compromised or
    breached passwords. These passwords are likely to be used in
    password guessing attacks.

Source: MITRE CWE-1391

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-53558 Public exploit

    ZXHN-F660T and ZXHN-F660A provided by ZTE Japan K.K. use a common credential for all installations. With the knowledge …

    ZTE Japan. K.K. ZXHN-F660A ZXHN-F660T
  • High 7.1
    CVE-2024-40892 Public exploit

    Firewalla BTLE Weak Credentials

    A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a physically close attacker to use the license UUID for authentication and provision SSH credentials over the Bluetooth Low-Energy (BTLE) interfa…

    Firewalla Box Software