CWE-256 · Plaintext Storage of a Password (page 3)
Page 3 of 3 — CVEs classified under CWE-256, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43590 | Medium | 6.0 | 2022-03-04 | Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability. A local high privi… |
CVE-2022-22554 | High | 8.2 | 2022-01-24 | Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potent… |
CVE-2021-23207 | Medium | 6.5 | 2022-01-21 | An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed ve… |
CVE-2021-36317 | Medium | 6.7 | 2021-12-21 | Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially exploit this vulner… |
CVE-2021-3787 | Medium | 6.4 | 2021-11-12 | A vulnerability was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with local access to obtain the MQTT credentials tha… |
CVE-2021-36309 | High | 7.1 | 2021-10-01 | Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to… |
CVE-2021-1589 | Medium | 6.5 | 2021-09-23 | A vulnerability in the disaster recovery feature of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain unauthorized access to… |
CVE-2020-5315 | High | 8.8 | 2021-07-19 | Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a l… |
CVE-2021-25358 | Medium | 4.0 | 2021-04-09 | A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission… |
CVE-2021-1126 | Medium | 5.5 | 2021-01-13 | A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view cred… |
CVE-2020-26079 | Medium | 4.9 | 2020-11-18 | A vulnerability in the web UI of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to obtain hashes of user passwords on an… |
CVE-2020-8183 | High | 7.5 | 2020-11-02 | A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call. |
CVE-2020-1669 | Medium | 6.3 | 2020-10-16 | The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes i… |
CVE-2020-3483 | High | 7.1 | 2020-10-14 | Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL certificates and private keys were not exc… |
CVE-2020-10609 | High | 7.5 | 2020-07-27 | Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone w… |
CVE-2020-5374 | High | 8.8 | 2020-07-14 | Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnera… |
CVE-2019-19105 | Medium | 6.2 | 2020-04-22 | The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application… |
CVE-2020-6961 | Critical | 10.0 | 2020-01-24 | In ApexPro Telemetry Server, Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE… |
CVE-2019-0072 | Medium | 5.6 | 2019-10-09 | An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain acce… |
CVE-2019-10921 | High | 7.5 | 2019-05-14 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). Unencrypted storage of passwords in the project could allow an… |
CVE-2019-0032 | High | 7.8 | 2019-04-10 | A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated a… |
CVE-2017-6049 | High | 7.5 | 2019-04-02 | Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL. |
CVE-2019-6518 | High | 7.5 | 2019-03-05 | Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device. |
CVE-2017-16714 | Critical | 9.8 | 2018-09-06 | In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that is accessible without authentication. |
CVE-2018-8851 | Critical | 9.8 | 2018-07-24 | Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. The devices store… |
CVE-2018-7510 | Critical | 9.8 | 2018-06-06 | In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plain… |
CVE-2018-7515 | Medium | 5.3 | 2018-03-21 | In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initial… |
CVE-2017-9856 | Low | 3.4 | 2017-08-05 | An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypted very easily. The passwords are "encry… |
CVE-2017-7913 | Critical | 9.8 | 2017-05-29 | A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1… |