CWE-321 使用硬编码的密码学密钥 类弱点 319 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-321 指软件在代码中硬编码了不可更改的加密密钥。攻击者通过逆向工程提取该密钥，即可解密受保护数据或伪造合法通信，严重破坏机密性与完整性。开发者应避免此类做法，改用动态密钥管理机制，如从安全密钥库、环境变量或硬件安全模块中运行时获取密钥，确保密钥可轮换且不与源代码一同发布。
int VerifyAdmin(char *password) { if (strcmp(password,"68af404b513073584c4b6f22b6c63e6b")) { printf("Incorrect Password!\n"); return(0); } printf("Entering Diagnostic Mode...\n"); return(1); }public boolean VerifyAdmin(String password) { if (password.equals("68af404b513073584c4b6f22b6c63e6b")) { System.out.println("Entering Diagnostic Mode..."); return true; } System.out.println("Incorrect Password!"); return false;| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-58069 | AutomationDirect CLICK PLUS 安全漏洞 — CLICK PLUS C0-0x CPU firmware | 5.3 | Medium | 2025-09-23 |
| CVE-2025-54807 | Dover Fueling Solutions多款产品 安全漏洞 — ProGauge MagLink LX 4 | 9.8 | Critical | 2025-09-18 |
| CVE-2025-55112 | BMC Control-M 安全漏洞 — Control-M/Agent | 7.4 | High | 2025-09-16 |
| CVE-2025-10250 | DJI Mavic 安全漏洞 — Mavic Spark | 5.0 | Medium | 2025-09-11 |
| CVE-2025-10080 | Datart 安全漏洞 — Datart | 3.1 | Low | 2025-09-08 |
| CVE-2025-30198 | ECOVACS robot vacuums 安全漏洞 — DEEBOT X1 Series | 6.3 | Medium | 2025-09-05 |
| CVE-2025-30200 | ECOVACS robot vacuums 安全漏洞 — DEEBOT X1 Series | 6.3 | Medium | 2025-09-05 |
| CVE-2025-9604 | Coze Studio 安全漏洞 — coze-studio | 3.7 | Low | 2025-08-29 |
| CVE-2025-41702 | Welotec多款产品 安全漏洞 — EG400Mk2-D11001-000101 | 9.8 | Critical | 2025-08-26 |
| CVE-2025-8759 | TRENDnet TN-200 安全漏洞 — TN-200 | 3.7 | Low | 2025-08-09 |
| CVE-2025-2810 | Dräger ICMHelper 安全漏洞 — Draeger ICMHelper | 5.5 | Medium | 2025-08-05 |
| CVE-2025-26476 | Dell ECS 安全漏洞 — ECS | 8.4 | High | 2025-08-04 |
| CVE-2025-38741 | Dell Enterprise SONiC OS 安全漏洞 — Enterprise SONiC OS | 7.5 | High | 2025-08-04 |
| CVE-2025-44963 | RUCKUS Network Director 安全漏洞 — Network Director | 9.0 | Critical | 2025-08-04 |
| CVE-2025-43483 | HP Poly Clariti Manager 安全漏洞 — Poly Clariti Manager | 7.5 | - | 2025-07-22 |
| CVE-2025-6071 | ABB RMC-100 安全漏洞 — RMC-100 | 5.3 | Medium | 2025-07-03 |
| CVE-2025-6074 | ABB RMC-100 安全漏洞 — RMC-100 | 6.5 | Medium | 2025-07-03 |
| CVE-2025-6669 | sublinkX 安全漏洞 — sublinkX | 3.7 | Low | 2025-06-25 |
| CVE-2025-5353 | Ivanti Workspace Control 安全漏洞 — Workspace Control | 8.8 | High | 2025-06-10 |
| CVE-2025-22463 | Ivanti Workspace Control 安全漏洞 — Workspace Control | 7.3 | High | 2025-06-10 |
| CVE-2025-22455 | Ivanti Workspace Control 安全漏洞 — Workspace Control | 8.8 | High | 2025-06-10 |
| CVE-2025-49164 | Arris VIP1113 安全漏洞 — VIP1113 | 4.3 | Medium | 2025-06-02 |
| CVE-2025-5164 | PerfreeBlog 安全漏洞 — PerfreeBlog | 3.7 | Low | 2025-05-26 |
| CVE-2025-48417 | eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2 安全漏洞 — cPH2 / cPP2 charging stations | 8.1AI | High AI | 2025-05-21 |
| CVE-2024-56429 | itech iLabClient 安全漏洞 — iLabClient | 7.7 | High | 2025-05-21 |
| CVE-2025-4876 | ConnectWise Risk Assessment 安全漏洞 — Risk Assessment | 6.0 | Medium | 2025-05-19 |
| CVE-2025-45746 | ZKTeco ZKBio CVSecurity 安全漏洞 — ZKBio CVSecurity | 6.5 | Medium | 2025-05-13 |
| CVE-2024-58134 | Mojolicious 安全漏洞 — Mojolicious | 7.7AI | High AI | 2025-05-03 |
| CVE-2025-32730 | i-PRO Surveillance Cameras和i-PRO Recorders 安全漏洞 — i-PRO Configuration Tool | 7.8 | - | 2025-04-24 |
| CVE-2025-30206 | Dpanel 安全漏洞 — dpanel | 9.8 | Critical | 2025-04-15 |
CWE-321（使用硬编码的密码学密钥） 是常见的弱点类别，本平台收录该类弱点关联的 319 条 CVE 漏洞。