CWE-256 明文存储口令 类弱点 180 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-256 指产品将密码以明文形式存储在内存或文件等资源中，属于数据保护不当类漏洞。攻击者若获取系统访问权限，可直接读取存储介质中的明文密码，进而冒充合法用户进行未授权访问或横向移动。开发者应避免直接存储明文，转而采用加盐哈希算法对密码进行不可逆处理，并确保密钥管理安全，从而有效防止凭据泄露风险。
... Properties prop = new Properties(); prop.load(new FileInputStream("config.properties")); String password = prop.getProperty("password"); DriverManager.getConnection(url, usr, password); ...... String password = regKey.GetValue(passKey).toString(); NetworkCredential netCred = new NetworkCredential(username,password,domain); ...| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-32978 | CLICK PLC CPU Modules 安全漏洞 — CLICK PLC CPU Modules: C0-1x CPUs | 7.5 | High | 2022-04-04 |
| CVE-2020-25184 | Rockwell Automation ISaGRAF 安全漏洞 — ISaGRAF Runtime | 7.8 | High | 2022-03-18 |
| CVE-2021-43590 | Dell Emc Enterprise Storage Analytics For Vrealize Operations 安全漏洞 — Dell EMC Enterprise Storage Analytics for vRealize Operations | 6.0 | Medium | 2022-03-04 |
| CVE-2022-22554 | Dell Emc System Update 安全漏洞 — DellEMC System Update - DSU | 8.2 | High | 2022-01-24 |
| CVE-2021-23207 | Fresenius Kabi Agilia Connect Infusion System 安全漏洞 — Vigilant Software Suite (Mastermed Dashboard) | 6.5 | Medium | 2022-01-21 |
| CVE-2021-36317 | DELL Dell EMC Avamar Server 安全漏洞 — Avamar | 6.7 | Medium | 2021-12-21 |
| CVE-2021-3787 | Binatone Hubble 安全漏洞 — Binatone Hubble Cameras | 6.4 | Medium | 2021-11-12 |
| CVE-2021-36309 | Dell Enterprise Sonic Os 信息泄露漏洞 — Enterprise SONiC OS | 7.1 | High | 2021-10-01 |
| CVE-2021-1589 | Cisco SD-WAN vManage Software 授权问题漏洞 — Cisco SD-WAN vManage | 6.5 | Medium | 2021-09-23 |
| CVE-2020-5315 | DELL EMC Repository Manager 安全漏洞 — Dell EMC Repository Manager (DRM) | 8.8 | High | 2021-07-19 |
| CVE-2021-25358 | Samsung SMR 安全漏洞 — Samsung Mobile Devices | 4.0 | Medium | 2021-04-09 |
| CVE-2021-1126 | Cisco Firepower Management Center 信息泄露漏洞 — Cisco Firepower Management Center | 5.5 | - | 2021-01-13 |
| CVE-2020-26079 | Cisco IoT Field Network Director 安全漏洞 — Cisco IoT Field Network Director (IoT-FND) | 4.9 | - | 2020-11-18 |
| CVE-2020-8183 | Nextcloud 安全漏洞 — Nextcloud Server | 6.5 | - | 2020-10-30 |
| CVE-2020-1669 | Juniper Networks Junos OS NFX 信息泄露漏洞 — Junos OS | 6.3 | Medium | 2020-10-16 |
| CVE-2020-3483 | Duo Network Gateway 安全漏洞 — Duo Network Gateway (DNG) | 7.1 | High | 2020-10-14 |
| CVE-2020-10609 | Grundfos CIM 500 安全漏洞 — CIM 500 | 9.8 | - | 2020-07-27 |
| CVE-2020-5374 | Dell EMC OpenManage Integration for Microsoft System Center 安全漏洞 — OMIMSSC (OpenManage Integration for Microsoft System Center) | 8.8 | High | 2020-07-14 |
| CVE-2019-19105 | ABB Telephone Gateway TG/S和Busch-Jaeger Telefon-Gateway 安全漏洞 — TG/S 3.2 Telephone Gateway | 6.2 | Medium | 2020-04-22 |
| CVE-2020-6961 | 多款GE产品安全漏洞 — GE CARESCAPE Telemetry Server,ApexPro Telemetry Server,CARESCAPE Central Station,Clinical Information Center,CARESCAPE B450,B650,B850 Monitors | 8.6 | - | 2020-01-24 |
| CVE-2019-0072 | Juniper Networks SBR Carrier 安全漏洞 — SBR Carrier | 5.6 | Medium | 2019-10-09 |
| CVE-2019-10921 | Siemens LOGO!8 BM 信任管理问题漏洞 — LOGO! 8 BM (incl. SIPLUS variants) | 7.5 | - | 2019-05-14 |
| CVE-2019-0032 | Juniper Networks Junos Space Service Now和Junos Space Service Insight 日志信息泄露漏洞 — Service Insight | 7.8 | - | 2019-04-10 |
| CVE-2017-6049 | Detcon SiteWatch Gateway 授权问题漏洞 — Sitewatch Gateway | 5.3 | - | 2019-04-02 |
| CVE-2019-6518 | 多款Moxa产品信息泄露漏洞 — Moxa IKS, EDS | 7.5 | - | 2019-03-05 |
| CVE-2017-16714 | Ice Qube Thermal Management Center 安全漏洞 — Thermal Management Center | 9.8 | - | 2018-09-06 |
| CVE-2018-8851 | 多款Echelon产品安全漏洞 — SmartServer 1 | 9.8 | - | 2018-07-24 |
| CVE-2018-7510 | BeaconMedaes TotalAlert Scroll Medical Air Systems Web应用程序安全漏洞 — BeaconMedaes TotalAlert Scroll Medical Air Systems web application | 9.8 | - | 2018-06-06 |
| CVE-2018-7515 | Omron CX-Supervisor 缓冲区错误漏洞 — BeaconMedæs TotalAlert Scroll Medical Air Systems web application | 5.3 | - | 2018-03-21 |
| CVE-2017-7913 | 多款摩莎产品安全漏洞 — Moxa OnCell | 9.8 | - | 2017-05-29 |
CWE-256（明文存储口令） 是常见的弱点类别，本平台收录该类弱点关联的 180 条 CVE 漏洞。