Skip to content
OpenAdvisories

Weakness (CWE)

CWE-321: Use of Hard-coded Cryptographic Key

Variant Draft

The product uses a hard-coded, unchangeable cryptographic key.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Prevention schemes mirror that of hard-coded password storage.

Source: MITRE CWE-321

All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • Low 3.7
    CVE-2023-3947

    Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure

    The Video Conferencing with Zoom plugin for WordPress is vulnerable to Sensitive Information Exposure due to hardcoded encryption key on the 'vczapi_encrypt_decrypt' function in versions up to, and including, 4.2.1. This makes it possible for unauthenticated …

    j_3rk Video Conferencing with Zoom Web / CMS
  • Low 3.5
    CVE-2019-17098

    Use of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App

    Use of hard-coded cryptographic key vulnerability in August Connect Wi-Fi Bridge App, Connect Firmware allows an attacker to decrypt an intercepted payload containing the Wi-Fi network authentication credentials. This issue affects: August Connect Wi-Fi Bridg…

    August Connect Firmware Smart Lock and Connect Wi-Fi Bridge App