CWE-321 - Use of Hard-coded Cryptographic Key

Description

Using of hard-coded cryptographic key for encrypting the information increases possibility of remote hackers to get access to information.
The weakness is introduced during Architecture and Design stage.

Latest vulnerabilities for CWE-321

Secure Boot bypass in Dell Client Platform BIOS 2024-08-28
Low Yes

Multiple vulnerabilities in Avtec Outpost 0810 and Outpost Uploader Utility 2024-08-23
Medium Yes

Use of Hard-coded Cryptographic Key in Cisco Intelligent Node Software 2024-07-18
Medium Yes

Multiple vulnerabilities in Logsign Unified SecOps Platform 2024-06-17
High Yes

Multiple vulnerabilities in Siemens SCALANCE W700 802.11 AX Family 2024-06-14
Medium No

MitM attack in ZTE ZXUN-ePDG 2024-05-13
Medium Yes

Use of Hard-coded Cryptographic Key in OfferBox App 2024-05-10
Low Yes

Multiple vulnerabilities in CyberPower PowerPanel 2024-05-03
High Yes

Multiple vulnerabilities in Juniper Networks Junos cRPD 2024-04-15
High Yes

Multiple vulnerabilities in Juniper Cloud Native Router 2024-04-15
High Yes

References

Description of CWE-321 on Mitre website