CWE-258 (配置文件中缺省空口令) — Vulnerability Class 9

9 vulnerabilities classified as CWE-258 (配置文件中缺省空口令). AI Chinese analysis included.

CVE ID	Title	CVSS	Severity	Published
CVE-2025-9276	Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability — cockroach-k8s-request-cert	9.8	-	2025-09-02
CVE-2025-4395	Medtronic MyCareLink Patient Monitor Empty Password Vulnerability — MyCareLink Patient Monitor 24950	6.8	Medium	2025-07-24
CVE-2024-35137	IBM Security Access Manager Docker information disclosure — Security Verify Access Docker	6.2	Medium	2024-06-28
CVE-2024-4106	Yokogawa FAST/TOOLS 安全漏洞 — FAST/TOOLS	5.3	Medium	2024-06-26
CVE-2023-43016	IBM Security Access Manager Container unauthorized access — Security Verify Access Appliance	7.3	High	2024-02-03
CVE-2023-39439	SAP Commerce accepts empty passphrases. — SAP Commerce	8.8	High	2023-08-08
CVE-2020-29478	Broadcom CA Service Catalog 安全漏洞 — CA Service Catalog	7.5	-	2021-01-05
CVE-2019-5021	Alpine Linux Docker 安全漏洞 — Alpine Linux	9.8	-	2019-05-08
CVE-2018-17914	Schneider Electric InduSoft Web Studio和InTouch Edge HMI 安全漏洞 — InduSoft Web Studio, and InTouch Edge HMI (formerly InTouch Machine Edition)	9.8	-	2018-11-02

Vulnerabilities classified as CWE-258 (配置文件中缺省空口令) represent 9 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.