CWE-257 · 69 records

Storing Passwords in a Recoverable Format

CVEs in this class

69 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
62This week	CVE-2026-20128Weaponized	Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerabilitycisco · catalyst sd-wan manager · CWE-257 Local privilege escalation	High7.5	KEV	7.3%	Feb 25, 2026
39Monitor	CVE-2022-32519No exploit	A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when perforschneider-electric · data center expert · CWE-257 Pre-auth	Critical9.8	—	0.4%	Jan 30, 2023
39Monitor	CVE-2023-0353No exploit	Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encryptakuvox · e11 firmware · CWE-257 Pre-auth Hard-coded credentials	Critical9.8	—	0.4%	Mar 13, 2023
37Monitor	CVE-2026-28745No exploit	Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Formatred lion controls · 700 series · CWE-257 Pre-auth Hard-coded credentials	Critical9.3	—	0.2%	Oct 9, 2026
36Monitor	CVE-2025-8904No exploit	Privilege escalation issue in Amazon EMR Secret Agent componentamazon · emr · CWE-257	Critical9.0	—	0.3%	Aug 13, 2025
36Monitor	CVE-2025-8095No exploit	Recoverable obfuscation using the OECH1 prefix encoding in OpenEdgeprogress software corporation · openedge · CWE-257 Pre-auth	Critical9.1	—	0.2%	Apr 14, 2026
34Monitor	CVE-2016-15058No exploit	Hirschmann HiLCOS Classic Platform Password Exposure via SNMPbelden · hirschmann hilcos classic platform · CWE-257 Pre-auth	High8.6	—	0.2%	Apr 3, 2026
33Monitor	CVE-2025-6995No exploit	Improper Encryption in Ivanti Endpoint Managerivanti · endpoint manager · CWE-257	High8.4	—	0.1%	Jul 8, 2025
33Monitor	CVE-2025-6996No exploit	Improper Encryption in Ivanti Endpoint Managerivanti · endpoint manager · CWE-257	High8.4	—	0.1%	Jul 8, 2025
33Monitor	CVE-2025-34180No exploit	NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recoverynetsupport software · manager · CWE-257	High8.4	—	0.1%	Dec 15, 2025
33Monitor	CVE-2022-34838No exploit	ABB Ability TM Operations Data Management Zenon Zenon Log Server file access controlabb · zenon · CWE-257	High8.4	—	0.1%	Aug 24, 2022
32Monitor	CVE-2023-38738No exploit	IBM OpenPages with Watson information disclosureibm · openpages with watson · CWE-257	High8.1	—	0.5%	Jan 18, 2024
32Monitor	CVE-2026-30785No exploit	RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)rustdesk · rustdesk · CWE-257 Prototype pollution	High8.2	—	0.1%	Mar 5, 2026
31Monitor	CVE-2023-21726No exploit	Windows Credential Manager User Interface Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-257 Local privilege escalation	High7.8	—	0.4%	Jan 10, 2023
31Monitor	CVE-2017-9942No exploit	A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to thsiemens · sipass integrated · CWE-257	High7.8	—	0.2%	Aug 7, 2017
31Monitor	CVE-2022-22251No exploit	cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesjuniper · junos · CWE-257 Local privilege escalation	High7.8	—	0.1%	Oct 17, 2022
30Monitor	CVE-2021-27485No exploit	ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allozoll · defibrillator dashboard · CWE-257 Pre-auth	High7.5	—	1.1%	Jun 16, 2021
30Monitor	CVE-2021-35050No exploit	User Credentials Stored in a Recoverable Format within Fidelis Network and Deceptionfidelissecurity · deception · CWE-257 Pre-auth	High7.5	—	1.0%	Jun 25, 2021
30Monitor	CVE-2024-1480No exploit	Unitronics Vision Standard Unauthenticated Password Retrievalunitronics · vision230 · CWE-257 Pre-auth Auth bypass	High7.5	—	0.5%	Apr 19, 2024
30Monitor	CVE-2024-32042No exploit	CyberPower PowerPanel business Storing Passwords in a Recoverable Formatcyberpower · powerpanel · CWE-257 Pre-auth	High7.5	—	0.3%	May 15, 2024
30Monitor	CVE-2025-44958No exploit	RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.commscope · ruckus network director · CWE-257 Pre-auth	High7.5	—	0.3%	Aug 4, 2025
30Monitor	CVE-2024-8774No exploit	Privilege Escalation in SIMPLE.ERPsimple sa · simple.erp · CWE-257	High7.7	—	0.3%	Mar 24, 2025
30Monitor	CVE-2023-5627No exploit	Incorrect Implementation of Authentication Algorithm Vulnerabilitymoxa · nport 6150-t firmware · CWE-257 Pre-auth	High7.5	—	0.3%	Nov 1, 2023
30Monitor	CVE-2024-3543No exploit	LoadMaster Reversible Password Encryption Algorithmprogress · loadmaster · CWE-257 Pre-auth	High7.5	—	0.2%	May 2, 2024
30Monitor	CVE-2026-65309No exploit	Storage of passwords in a reversible formatandritz · hipase-250 · CWE-257 Pre-auth	High7.5	—	0.2%	Jul 31, 2026

CVE-2026-20128
62This week
Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
HighCVSS 7.5KEVWeaponizedEPSS 7%
- Local privilege escalation
cisco · catalyst sd-wan managerFeb 25, 2026
CVE-2022-32519
39Monitor
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when perfor
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
schneider-electric · data center expertJan 30, 2023
CVE-2023-0353
39Monitor
Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypt
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
akuvox · e11 firmwareMar 13, 2023
CVE-2026-28745
37Monitor
Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
red lion controls · 700 seriesOct 9, 2026
CVE-2025-8904
36Monitor
Privilege escalation issue in Amazon EMR Secret Agent component
CriticalCVSS 9.0No exploitEPSS 0%
amazon · emrAug 13, 2025
CVE-2025-8095
36Monitor
Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
progress software corporation · openedgeApr 14, 2026
CVE-2016-15058
34Monitor
Hirschmann HiLCOS Classic Platform Password Exposure via SNMP
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
belden · hirschmann hilcos classic platformApr 3, 2026
CVE-2025-6995
33Monitor
Improper Encryption in Ivanti Endpoint Manager
HighCVSS 8.4No exploitEPSS 0%
ivanti · endpoint managerJul 8, 2025
CVE-2025-6996
33Monitor
Improper Encryption in Ivanti Endpoint Manager
HighCVSS 8.4No exploitEPSS 0%
ivanti · endpoint managerJul 8, 2025
CVE-2025-34180
33Monitor
NetSupport Manager < 14.12.0001 Gateway Key Reversible Encoding Credential Recovery
HighCVSS 8.4No exploitEPSS 0%
netsupport software · managerDec 15, 2025
CVE-2022-34838
33Monitor
ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control
HighCVSS 8.4No exploitEPSS 0%
abb · zenonAug 24, 2022
CVE-2023-38738
32Monitor
IBM OpenPages with Watson information disclosure
HighCVSS 8.1No exploitEPSS 0%
ibm · openpages with watsonJan 18, 2024
CVE-2026-30785
32Monitor
RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)
HighCVSS 8.2No exploitEPSS 0%
- Prototype pollution
rustdesk · rustdeskMar 5, 2026
CVE-2023-21726
31Monitor
Windows Credential Manager User Interface Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1607Jan 10, 2023
CVE-2017-9942
31Monitor
A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker with local access to th
HighCVSS 7.8No exploitEPSS 0%
siemens · sipass integratedAug 7, 2017
CVE-2022-22251
31Monitor
cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
juniper · junosOct 17, 2022
CVE-2021-27485
30Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allo
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
zoll · defibrillator dashboardJun 16, 2021
CVE-2021-35050
30Monitor
User Credentials Stored in a Recoverable Format within Fidelis Network and Deception
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
fidelissecurity · deceptionJun 25, 2021
CVE-2024-1480
30Monitor
Unitronics Vision Standard Unauthenticated Password Retrieval
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
unitronics · vision230Apr 19, 2024
CVE-2024-32042
30Monitor
CyberPower PowerPanel business Storing Passwords in a Recoverable Format
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
cyberpower · powerpanelMay 15, 2024
CVE-2025-44958
30Monitor
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
commscope · ruckus network directorAug 4, 2025
CVE-2024-8774
30Monitor
Privilege Escalation in SIMPLE.ERP
HighCVSS 7.7No exploitEPSS 0%
simple sa · simple.erpMar 24, 2025
CVE-2023-5627
30Monitor
Incorrect Implementation of Authentication Algorithm Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
moxa · nport 6150-t firmwareNov 1, 2023
CVE-2024-3543
30Monitor
LoadMaster Reversible Password Encryption Algorithm
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
progress · loadmasterMay 2, 2024
CVE-2026-65309
30Monitor
Storage of passwords in a reversible format
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
andritz · hipase-250Jul 31, 2026

All vulnerability classes