Weakness (CWE)
CWE-1391: Use of Weak Credentials
The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.
How to prevent it (1 mitigation)
-
Architecture and Design, Operation
When the user changes or sets a password, check
the password against a database of already compromised or
breached passwords. These passwords are likely to be used in
password guessing attacks.
Source: MITRE CWE-1391
3 results · Clear filters · Feed
-
Low 3.7
D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. …
-
Low 3.7
Reuse of salt
The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks.
-
Low 3.1
Bharti Airtel Xstream Fiber WiFi Password weak credentials
A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some unknown processing of the component WiFi Password Handler. The manipulation leads to use of weak credentials. The attack needs t…