CWE-321 使用硬编码的密码学密钥 类弱点 380 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-321 指软件在代码中硬编码了不可更改的加密密钥。攻击者通过逆向工程提取该密钥，即可解密受保护数据或伪造合法通信，严重破坏机密性与完整性。开发者应避免此类做法，改用动态密钥管理机制，如从安全密钥库、环境变量或硬件安全模块中运行时获取密钥，确保密钥可轮换且不与源代码一同发布。
int VerifyAdmin(char *password) { if (strcmp(password,"68af404b513073584c4b6f22b6c63e6b")) { printf("Incorrect Password!\n"); return(0); } printf("Entering Diagnostic Mode...\n"); return(1); }public boolean VerifyAdmin(String password) { if (password.equals("68af404b513073584c4b6f22b6c63e6b")) { System.out.println("Entering Diagnostic Mode..."); return true; } System.out.println("Incorrect Password!"); return false;| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-22844 | Milesight VPN 安全漏洞 — MilesightVPN | 7.3 | High | 2023-07-06 |
| CVE-2023-34338 | AMI MegaRAC 信任管理问题漏洞 — MegaRAC_SPx | 7.1 | High | 2023-07-05 |
| CVE-2023-3371 | WordPress plugin EmbedPress 安全漏洞 — EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more | 5.3 | Medium | 2023-06-27 |
| CVE-2023-2637 | Rockwell Automation FactoryTalk Services Platform 信任管理问题漏洞 — FactoryTalk System Services | 7.3 | High | 2023-06-13 |
| CVE-2023-21404 | AXIS OS 安全漏洞 — AXIS OS | 7.7 | - | 2023-05-08 |
| CVE-2023-2158 | Synopsys Code Dx 信任管理问题漏洞 — Code Dx | 9.1 | - | 2023-04-27 |
| CVE-2023-0391 | MGT-COMMERCE CloudPanel 信任管理问题漏洞 — CloudPanel | 8.1 | - | 2023-03-21 |
| CVE-2023-27583 | PanIndex 信任管理问题漏洞 — PanIndex | 9.8 | Critical | 2023-03-13 |
| CVE-2023-20016 | Cisco FXOS Software和UCS Manager 安全特征问题漏洞 — Cisco Unified Computing System (Managed) | 6.3 | Medium | 2023-02-23 |
| CVE-2023-21705 | Microsoft SQL Server 安全漏洞 — Microsoft SQL Server 2012 for x64-based Systems Service Pack 4 (QFE) | 8.8 | High | 2023-02-14 |
| CVE-2022-34386 | Dell SupportAssist for Home PCs 信任管理问题漏洞 — SupportAssist Client Consumer | 5.5 | Medium | 2023-02-10 |
| CVE-2023-20038 | Cisco Industrial Network Director 信任管理问题漏洞 — Cisco Industrial Network Director | 8.8 | High | 2023-01-19 |
| CVE-2022-34442 | Dell EMC SCG Policy Manager 信任管理问题漏洞 — Secure Connect Gateway (SCG) Policy Manager | 8.0 | High | 2023-01-18 |
| CVE-2022-34462 | Dell EMC SCG Policy Manager 信任管理问题漏洞 — Secure Connect Gateway (SCG) Policy Manager | 8.4 | High | 2023-01-18 |
| CVE-2017-5242 | Rapid7 Nexpose InsightVM Security Console 安全特征问题漏洞 — Nexpose Virtual Appliance | 7.7 | - | 2023-01-12 |
| CVE-2022-34441 | Dell EMC Secure Connect Gateway 信任管理问题漏洞 — Secure Connect Gateway (SCG) Policy Manager | 8.0 | High | 2023-01-11 |
| CVE-2022-34440 | Dell EMC Secure Connect Gateway 信任管理问题漏洞 — Secure Connect Gateway (SCG) Policy Manager | 8.4 | High | 2023-01-11 |
| CVE-2022-36925 | Zoom Rooms 信任管理问题漏洞 — Zoom Rooms for macOS | 4.4 | Medium | 2023-01-09 |
| CVE-2022-2660 | Delta Electronics Industrial Automation DIALink 信任管理问题漏洞 — Industrial Automation DIALink | 9.8 | Critical | 2022-12-13 |
| CVE-2022-2641 | Horner Automation Remote Compact Controller 安全漏洞 — Remote Compact Controller (RCC) 972 | 9.8 | Critical | 2022-12-12 |
| CVE-2022-29830 | Mitsubishi Electric GX Works3 信任管理问题漏洞 — GX Works3 | 9.1 | Critical | 2022-11-24 |
| CVE-2022-29829 | Mitsubishi Electric GX Works3 信任管理问题漏洞 — GX Works3 | 6.8 | Medium | 2022-11-24 |
| CVE-2022-29828 | Mitsubishi Electric GX Works3 信任管理问题漏洞 — GX Works3 | 6.8 | Medium | 2022-11-24 |
| CVE-2022-29827 | Mitsubishi Electric GX Works3 信任管理问题漏洞 — GX Works3 | 6.8 | Medium | 2022-11-24 |
| CVE-2022-20868 | 多款Cisco产品信任管理问题漏洞 — Cisco Secure Web Appliance | 4.7 | Medium | 2022-11-03 |
| CVE-2021-4228 | Lanner IAC-AST2500A 信任管理问题漏洞 — IAC-AST2500A | 5.8 | Medium | 2022-10-24 |
| CVE-2022-34425 | Dell Enterprise SONiC OS 信任管理问题漏洞 — Enterprise SONiC OS | 7.5 | High | 2022-10-10 |
| CVE-2022-1400 | Device42 信任管理问题漏洞 — CMDB | 7.1 | High | 2022-08-16 |
| CVE-2022-29186 | Rundeck信任管理问题漏洞 — rundeck | 9.1 | Critical | 2022-05-20 |
| CVE-2022-1701 | SonicWall SMA1000 series 信任管理问题漏洞 — SonicWall SMA1000 | 7.5 | - | 2022-05-13 |
CWE-321（使用硬编码的密码学密钥） 是常见的弱点类别，本平台收录该类弱点关联的 380 条 CVE 漏洞。