Skip to content
Noroxi

CWE-261 · 43 records

Weak Encoding for Password

CVEs in this class

43 records

  • CVE-2017-7905
    39Monitor

    A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions p

    CriticalCVSS 9.8No exploitEPSS 1%

    ge · multilin sr 750 feeder protection relay firmwareJun 29, 2017

  • CVE-2020-10275
    39Monitor

    RVD#2565: Weak token generation for the REST API.

    CriticalCVSS 9.8No exploitEPSS 1%

    mobile-industrial-robots · mir100 firmwareJun 24, 2020

  • CVE-2021-21507
    39Monitor

    Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.8

    CriticalCVSS 9.8No exploitEPSS 1%

    dell · x1008p firmwareApr 30, 2021

  • CVE-2025-31229
    36Monitor

    A logic issue was addressed with improved checks.

    CriticalCVSS 9.1No exploitEPSS 1%

    apple · ipadosJul 29, 2025

  • CVE-2024-24279
    35Monitor

    An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated

    HighCVSS 8.8No exploitEPSS 0%

    secdiskapp · secdiskappApr 8, 2024

  • CVE-2024-28270
    32Monitor

    An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/res

    HighCVSS 8.1No exploitEPSS 0%

    Apr 8, 2024

  • CVE-2024-7407
    32Monitor

    Weak password encoding in Streamsoft Prestiż

    HighCVSS 8.2No exploitEPSS 0%

    streamsoft · streamsoft prestiżMar 28, 2025

  • CVE-2022-45099
    31Monitor

    Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password.

    HighCVSS 7.8No exploitEPSS 0%

    dell · emc powerscale onefsFeb 1, 2023

  • CVE-2020-14481
    31Monitor

    The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decip

    HighCVSS 7.8No exploitEPSS 0%

    rockwellautomation · factorytalk viewFeb 24, 2022

  • CVE-2024-45273
    31Monitor

    MB connect line/Helmholz: Weak encryption of configuration file

    HighCVSS 7.8No exploitEPSS 0%

    mbconnectline · mbnet.mini firmwareOct 15, 2024

  • CVE-2024-45394
    31Monitor

    Secret encryption vulnerable to brute-force attacks

    HighCVSS 7.8No exploitEPSS 0%

    authenticator · authenticatorSep 3, 2024

  • CVE-2023-0525
    30Monitor

    Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 mod

    HighCVSS 7.5No exploitEPSS 1%

    mitsubishielectric · gt designer3Aug 3, 2023

  • CVE-2022-38469
    30Monitor

    An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.

    HighCVSS 7.5No exploitEPSS 1%

    ge · proficy historianJan 17, 2023

  • CVE-2023-0356
    30Monitor

    SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in thre

    HighCVSS 7.5No exploitEPSS 0%

    socomec · net visionJan 26, 2023

  • CVE-2023-7237
    30Monitor

    Lantronix XPort Weak Encoding for Password

    HighCVSS 7.5No exploitEPSS 0%

    lantronix · xport edge firmwareJan 23, 2024

  • CVE-2026-63424
    28Monitor

    During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authentic

    HighCVSS 7.0No exploitEPSS 0%

    lenovo · dock managerAug 13, 2026

  • CVE-2024-37187
    27Monitor

    Advantech ADAM-5550 Weak Encoding for Password

    MediumCVSS 6.8No exploitEPSS 0%

    advantech · adam-5550 firmwareSep 27, 2024

  • CVE-2024-34542
    27Monitor

    Advantech ADAM-5630 Weak Encoding for Password

    MediumCVSS 6.9No exploitEPSS 0%

    advantech · adam-5630 firmwareSep 27, 2024

  • CVE-2024-5434
    27Monitor

    Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMC

    MediumCVSS 6.9No exploitEPSS 0%

    campbell scientific · csi web server and rtmcMay 28, 2024

  • CVE-2025-2862
    27Monitor

    Weak Encoding for Password vulnerability in saTECH BCU

    MediumCVSS 6.9No exploitEPSS 0%

    arteche · satech bcu firmwareMar 28, 2025

  • CVE-2025-11155
    27Monitor

    WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION

    MediumCVSS 6.8No exploitEPSS 0%

    sato · s86-ex 203dpiSep 29, 2025

  • CVE-2026-22543
    27Monitor

    WEEK ENCODING FOR PASSWORDS

    MediumCVSS 6.9No exploitEPSS 0%

    efacec · qc 60/90/120Jan 7, 2026

  • CVE-2026-67596
    27Monitor

    CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg

    MediumCVSS 6.9No exploitEPSS 0%

    csl mobile limited · csl 1010 m2m 3g wifi moduleJul 30, 2026

  • CVE-2024-0556
    26Monitor

    Weak Cryptography for Passwords vulnerability on WIC1200

    MediumCVSS 6.5No exploitEPSS 0%

    xantech · wic1200 firmwareJan 16, 2024

  • CVE-2025-26401
    26Monitor

    Weak encoding for password vulnerability exists in HMI ViewJet C-more series.

    MediumCVSS 6.5No exploitEPSS 0%

    jtekt electronics corporation · hmi viewjet c-more seriesApr 3, 2025

All vulnerability classes