CWE-321 - Use of Hard-coded Cryptographic Key

Description

Using of hard-coded cryptographic key for encrypting the information increases possibility of remote hackers to get access to information.
The weakness is introduced during Architecture and Design stage.

Latest vulnerabilities for CWE-321

Use of hard-coded cryptographic key in Apache StreamPark 2025-12-04
Medium Yes

Use of hard-coded cryptographic key in Apache Syncope 2025-11-28
Low Yes

Use of hard-coded cryptographic key in Fuji Television Network FOD App 2025-11-25
Low Yes

Multiple vulnerabilities in NEOJAPAN desknet's NEO 2025-10-16
Medium Yes

Multiple vulnerabilities in AutomationDirect CLICK PLUS 2025-09-24
High Yes

Use of hard-coded cryptographic key in SolarWinds Database Performance Analyzer 2025-08-13
Low Yes

Multiple vulnerabilities in ABB RMC-100 2025-07-16
Medium No

Multiple vulnerabilities in Ruckus Virtual SmartZone (vSZ) and Network Director (RND) 2025-07-10
High No

Multiple vulnerabilities in IBM API Connect 2025-06-11
Critical Yes Public exploit

Use of hard-coded cryptographic key in Ivanti Workspace Control 2025-06-10
Low Yes

References

Description of CWE-321 on Mitre website