CWE-259 使用硬编码的口令 类弱点 126 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-259 指软件在入站认证或出站通信中硬编码密码的漏洞。攻击者常通过逆向工程提取源码中的明文凭证，进而伪装合法用户或横向渗透外部系统。开发者应避免此类做法，改用环境变量、密钥管理服务或配置文件存储敏感信息，确保密码动态生成且与代码分离，从而降低凭证泄露风险。
... DriverManager.getConnection(url, "scott", "tiger"); ...javap -c ConnMngr.class 22: ldc #36; //String jdbc:mysql://ixne.com/rxsql 24: ldc #38; //String scott 26: ldc #17; //String tigerint VerifyAdmin(char *password) { if (strcmp(password, "Mew!")) { printf("Incorrect Password!\n"); return(0); } printf("Entering Diagnostic Mode...\n"); return(1); }int VerifyAdmin(String password) { if (!password.equals("Mew!")) { return(0); } //Diagnostic Mode return(1); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-47823 | Flock Safety LPR 安全漏洞 — License Plate Reader | 2.2 | Low | 2025-06-27 |
| CVE-2025-6139 | TOTOLINK T10 安全漏洞 — T10 | 3.9 | Low | 2025-06-16 |
| CVE-2025-20286 | Cisco Identity Services Engine 安全漏洞 — Cisco Identity Services Engine Software | 9.9 | Critical | 2025-06-04 |
| CVE-2025-2402 | KNIME Business Hub 安全漏洞 — KNIME Business Hub | 9.8 | - | 2025-03-31 |
| CVE-2025-2555 | Audi Universal Traffic Recorder App 安全漏洞 — Universal Traffic Recorder App | 2.9 | Low | 2025-03-20 |
| CVE-2024-48831 | Dell SmartFabric OS10 安全漏洞 — SmartFabric OS10 Software | 8.4 | High | 2025-03-17 |
| CVE-2025-1100 | Q-Free MAXTIME Suite 安全漏洞 — MaxTime | 9.8 | Critical | 2025-02-12 |
| CVE-2022-26388 | Hillrom Welch Allyn ELI 安全漏洞 — ELI 380 Resting Electrocardiograph | 6.4 | Medium | 2025-02-07 |
| CVE-2024-4996 | Asseco Business Solutions Wapro ERP 安全漏洞 — Wapro ERP Desktop | 7.5 | - | 2024-12-18 |
| CVE-2024-11026 | Intelligent Freenow 安全漏洞 — Freenow App | 3.7 | Low | 2024-11-08 |
| CVE-2024-20412 | Cisco Firepower Threat Defense 安全漏洞 — Cisco Firepower Threat Defense Software | 9.3 | Critical | 2024-10-23 |
| CVE-2024-43423 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE 安全漏洞 — ProGauge MAGLINK LX CONSOLE | 9.8 | Critical | 2024-09-24 |
| CVE-2024-8580 | TOTOLINK AC1200 安全漏洞 — AC1200 T8 | 8.1 | High | 2024-09-08 |
| CVE-2024-39585 | Dell SmartFabric OS10 安全漏洞 — SmartFabric OS10 Software | 7.9 | High | 2024-09-06 |
| CVE-2024-7332 | TOTOLINK CP450 安全漏洞 — CP450 | 9.8 | Critical | 2024-08-01 |
| CVE-2024-7216 | TOTOLINK LR1200GB 安全漏洞 — LR1200 | 2.6 | Low | 2024-07-30 |
| CVE-2024-7170 | TOTOLINK A3000Ru 安全漏洞 — A3000RU | 3.5 | Low | 2024-07-28 |
| CVE-2024-7159 | TOTOLINK A3600R 安全漏洞 — A3600R | 5.5 | Medium | 2024-07-28 |
| CVE-2024-7155 | TOTOLINK A3300R 安全漏洞 — A3300R | 2.5 | Low | 2024-07-28 |
| CVE-2023-46685 | LevelOne WBR-6013 安全漏洞 — WBR-6013 | 9.8 | Critical | 2024-07-08 |
| CVE-2024-4708 | mySCADA myPRO 安全漏洞 — myPRO | 9.8 | Critical | 2024-07-02 |
| CVE-2024-5275 | FileCatalyst Workflow 安全漏洞 — FileCatalyst Direct | 7.8 | High | 2024-06-18 |
| CVE-2024-27164 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP) | 7.1 | High | 2024-06-14 |
| CVE-2024-28023 | Hitachi FOXMAN-UN 安全漏洞 — FOXMAN-UN | 5.7 | Medium | 2024-06-11 |
| CVE-2024-3700 | Estomed Sp. z o.o. Simple Care 安全漏洞 — Simple Care | 7.5 | - | 2024-06-10 |
| CVE-2024-3699 | drEryk Gabinet 安全漏洞 — drEryk Gabinet | 7.5 | - | 2024-06-10 |
| CVE-2024-1228 | Eurosoft Przychodnia 安全漏洞 — Eurosoft Przychodnia | 7.5 | - | 2024-06-10 |
| CVE-2024-2420 | NetBox 安全漏洞 — NetBox | 9.8AI | Critical AI | 2024-05-30 |
| CVE-2024-2038 | WordPress plugin Atarim 安全漏洞 — Atarim – Visual Feedback, Review & AI Collaboration | 7.5 | High | 2024-05-23 |
| CVE-2024-33625 | Cyber Power Systems PowerPanel Business Edition 安全漏洞 — PowerPanel business | 9.8 | Critical | 2024-05-15 |
CWE-259（使用硬编码的口令） 是常见的弱点类别，本平台收录该类弱点关联的 126 条 CVE 漏洞。