CWE-321 - Use of Hard-coded Cryptographic Key

Description

Using of hard-coded cryptographic key for encrypting the information increases possibility of remote hackers to get access to information.
The weakness is introduced during Architecture and Design stage.

Latest vulnerabilities for CWE-321

Multiple vulnerabilities in Siemens SCALANCE X-300 Switches 2021-01-13
High Yes

Multiple vulnerabilities in Siemens SCALANCE X-200 and SCALANCE X-200IRT Switches 2021-01-13
High No

Multiple vulnerabilities in GE Reason RT43X Clocks 2021-01-06
High Yes

Multiple vulnerabilities in NVIDIA DGX servers 2020-10-29
High Yes

Information disclosure in Schneider Electric EcoStruxure Operator Terminal Expert 2020-10-20
Medium No

Multiple vulnerabilities in Hyland OnBase 2020-09-14
High No

Multiple vulnerabilities in ENTTEC Lighting Controllers 2020-06-26
Medium No

Use of Hard-coded Cryptographic Key in Fortinet FortiClient for Windows 2020-06-02
Medium Yes

Multiple vulnerabilities in Kiali 2020-04-28
High Yes

Hard-coded cryptographic key in TeamViewer 2020-04-22
Low Yes

References

Description of CWE-321 on Mitre website