Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1393: Use of Default Password

Base Incomplete

The product uses default passwords for potentially critical functionality.

How to prevent it (4 mitigations)

  1. Requirements

    Prohibit use of default, hard-coded, or other values that do not vary for each installation of the product - especially for separate organizations.

  2. Documentation

    Ensure that product documentation clearly emphasizes the presence of default passwords and provides steps for the administrator to change them.

  3. Architecture and Design

    Force the administrator to change the credential upon installation.

  4. Installation, Operation

    The product administrator could change the defaults upon installation or during operation.

Source: MITRE CWE-1393

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.5
    CVE-2025-9589

    Cudy WR1200EA shadow default password

    A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is ass…

    Cudy WR1200EA
  • Low 3.1
    CVE-2025-1878

    i-Drive i11/i12 WiFi default password

    A vulnerability has been found in i-Drive i11 and i12 up to 20250227 and classified as problematic. This vulnerability affects unknown code of the component WiFi. The manipulation leads to use of default password. Access to the local network is required for t…

    i-Drive i12 i11