CWE-261 · Authentication
Weak Encoding for Password
44CVEs
SortMost likely exploited
44 CVEs with CWE-261 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-10919This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication…C-MORE · HMI EA9 · CVSS 5.9 · 2020-07-23 | 5.9 | 1.6% | 2020-07-23 |
| CVE-2017-7905A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750 Feeder Protection Relay, firmware versions prior to Version 7.47; SR 760 Feeder Pro…Ge · GE Multilin SR, UR, and URplus Protective Relays · 2017-06-30 | – | 1.3% | 2017-06-30 |
| CVE-2020-10275RVD#2565: Weak token generation for the REST API.Mobile Industrial Robots A/S · MiR100 · CVSS 9.8 · 2020-06-24 | 9.8 | 1.0% | 2020-06-24 |
| CVE-2025-31229A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may be read aloud by VoiceOver.Apple · iOS and iPadOS · CVSS 9.1 · 2025-07-29 | 9.1 | 0.9% | 2025-07-29 |
| CVE-2023-22271AEM Weak Cryptography for Passwords Security feature bypassAdobe · Experience Manager · CVSS 5.3 · 2023-03-22 | 5.3 | 0.8% | 2023-03-22 |
| CVE-2023-0525Weak Encoding for Password vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT27 model versions 01.49.000 and prior, GT25 model versions 01.49.000 and prior, GT23 m…Mitsubishi Electric Corporation · GOT2000 Series GT27 model · CVSS 7.5 · 2023-08-03 | 7.5 | 0.7% | 2023-08-03 |
| CVE-2022-38469An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.GE Digital · Proficy Historian · CVSS 7.5 · 2023-01-17 | 7.5 | 0.6% | 2023-01-17 |
| CVE-2021-21507Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vu…Dell · VRTX Switch Modules · CVSS 8.8 · 2021-04-30 | 8.8 | 0.5% | 2021-04-30 |
| CVE-2023-0356SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive informatio…SOCOMEC · MODULYS GP · CVSS 5.7 · 2023-01-24 | 5.7 | 0.5% | 2023-01-24 |
| CVE-2022-35931Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidatornextcloud · security-advisories · CVSS 2.7 · 2022-09-06 | 2.7 | 0.5% | 2022-09-06 |
| CVE-2024-28270An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword.No vendor recorded · CVSS 8.1 · 2024-04-08 | 8.1 | 0.4% | 2024-04-08 |
| CVE-2024-0556Weak Cryptography for Passwords vulnerability on WIC1200Full Compass Systems · WIC1200 · CVSS 7.1 · 2024-01-16 | 7.1 | 0.4% | 2024-01-16 |
| CVE-2024-7407Weak password encoding in Streamsoft PrestiżStreamsoft · Streamsoft Prestiż · CVSS 8.2 · 2025-03-28 | 8.2 | 0.4% | 2025-03-28 |
| CVE-2025-25298Missing Maximum Password Length Validation in Strapi Password Hashingstrapi · strapi · CVSS 6.3 · 2025-10-16 | 6.3 | 0.4% | 2025-10-16 |
| CVE-2025-11500Credentials exposure in tinycontrol devicestinycontrol · Lan Kontroler v3.5 · CVSS 8.7 · 2026-03-16 | 8.7 | 0.4% | 2026-03-16 |
| CVE-2024-37187Advantech ADAM-5550 Weak Encoding for PasswordAdvantech · ADAM 5550 · CVSS 5.7 · 2024-09-27 | 5.7 | 0.4% | 2024-09-27 |
| CVE-2024-8455PLANET Technology switch devices - Swctrl service exchanges weakly encoded passwordsPLANET Technology · GS-4210-24PL4C hardware 2.0 · CVSS 8.1 · 2024-09-30 | 8.1 | 0.3% | 2024-09-30 |
| CVE-2024-34113ColdFusion | Weak Cryptography for Passwords (CWE-261)Adobe · ColdFusion · CVSS 5.5 · 2024-06-13 | 5.5 | 0.3% | 2024-06-13 |
| CVE-2023-7237Lantronix XPort Weak Encoding for PasswordLantronix · XPort · CVSS 5.7 · 2024-01-23 | 5.7 | 0.3% | 2024-01-23 |
| CVE-2024-52334A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly. This could allow an attacke…Siemens · syngo.plaza VB30E · CVSS 5.3 · 2026-02-10 | 5.3 | 0.3% | 2026-02-10 |
| CVE-2026-0809Weak KSeF token encoding in Streamsoft PrestiżStreamsoft · Streamsoft Prestiż · CVSS 6.3 · 2026-03-12 | 6.3 | 0.3% | 2026-03-12 |
| CVE-2024-23492Commend WS203VICM Weak Encoding for PasswordCommend · WS203VICM · CVSS 5.7 · 2024-03-01 | 5.7 | 0.2% | 2024-03-01 |
| CVE-2024-34542Advantech ADAM-5630 Weak Encoding for PasswordAdvantech · ADAM-5630 · CVSS 5.7 · 2024-09-27 | 5.7 | 0.2% | 2024-09-27 |
| CVE-2024-5434Weak Encoding for Password vulnerability in Campbell Scientific CSI Web Server and RTMCCampbell Scientific · CSI Web Server and RTMC · CVSS 6.9 · 2024-05-28 | 6.9 | 0.2% | 2024-05-28 |
| CVE-2025-2862Weak Encoding for Password vulnerability in saTECH BCUArteche · saTECH BCU · CVSS 6.9 · 2025-03-28 | 6.9 | 0.2% | 2025-03-28 |
| CVE-2022-45099Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, l…Dell · PowerScale OneFS · CVSS 7.8 · 2023-02-01 | 7.8 | 0.2% | 2023-02-01 |
| CVE-2026-40639Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. An unauthenticated attacker with physical access could potentially exploit this vulnerability, leadi…Dell · Dell Edge Gateway 3000 · CVSS 5.7 · 2026-06-09 | 5.7 | 0.2% | 2026-06-09 |
| CVE-2025-11155WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATIONSATO · S86-ex 203dpi · CVSS 6.8 · 2025-09-29 | 6.8 | 0.2% | 2025-09-29 |
| CVE-2013-1053Insecure crypto for storing passwordsCanonical · remote-login-service · CVSS 5.5 · 2021-01-13 | 5.5 | 0.2% | 2021-01-13 |
| CVE-2026-22543WEEK ENCODING FOR PASSWORDSEFACEC · QC 60/90/120 · CVSS 6.9 · 2026-01-07 | 6.9 | 0.2% | 2026-01-07 |
| CVE-2025-26401Weak encoding for password vulnerability exists in HMI ViewJet C-more series. If this vulnerability is exploited, authentication information may be obtained by a local authenticat…JTEKT ELECTRONICS CORPORATION · HMI ViewJet C-more series · CVSS 6.5 · 2025-04-04 | 6.5 | 0.2% | 2025-04-04 |
| CVE-2026-110971Weak password encoding in PłatnikZakład Ubezpieczeń Społecznych · Płatnik · CVSS 7.7 · 2026-10-30 | 7.7 | 0.2% | 2026-10-30 |
| CVE-2022-34445Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leadi…Dell · PowerScale OneFS · CVSS 6 · 2023-02-10 | 6.0 | 0.2% | 2023-02-10 |
| CVE-2020-14481The DeskLock tool provided with FactoryTalk View SE uses a weak encryption algorithm that may allow a local, authenticated attacker to decipher user credentials, including the Win…Rockwell Automation · FactoryTalk View SE · CVSS 7.8 · 2022-02-24 | 7.8 | 0.2% | 2022-02-24 |
| CVE-2024-24279An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated privileges via vsVerifyPassword and vsS…Secdiskapp · Secdiskapp · CVSS 8.8 · 2024-04-08 | 8.8 | 0.1% | 2024-04-08 |
| CVE-2023-28896Weak encoding for password in UDS servicesJOYNEXT · MIB3 Infotainment Unit · CVSS 3.3 · 2023-12-01 | 3.3 | 0.1% | 2023-12-01 |
| CVE-2023-43776Weak encoding vulnerability in easyE4Eaton · easyE4 · CVSS 6.8 · 2023-10-17 | 6.8 | 0.1% | 2023-10-17 |
| CVE-2026-63424During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.Lenovo · Dock Manager · CVSS 7.3 · 2026-08-13 | 7.3 | 0.1% | 2026-08-13 |
| CVE-2026-67596CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfgCSL Mobile Limited · CSL 1010 M2M 3G WiFi Module · CVSS 6.2 · 2026-07-30 | 6.2 | 0.1% | 2026-07-30 |
| CVE-2026-73589Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attac…Dell · Secure Connect Gateway (SCG) Policy Manager · CVSS 6.3 · 2026-09-23 | 6.3 | 0.1% | 2026-09-23 |
| CVE-2025-67652AutomationDirect CLICK Programmable Logic Controller Weak Encoding for PasswordAutomationDirect · CLICK Programmable Logic Controller · CVSS 6.1 · 2026-01-22 | 6.1 | 0.1% | 2026-01-22 |
| CVE-2026-25607Weak password encoding in STERCentralny Instytut Ochrony Pracy - Państwowy Instytut Badaw… · STER · CVSS 5.7 · 2026-05-22 | 5.7 | 0.1% | 2026-05-22 |
| CVE-2024-45273MB connect line/Helmholz: Weak encryption of configuration fileMB connect line · mbNET.mini · CVSS 8.4 · 2024-10-15 | 8.4 | 0.1% | 2024-10-15 |
| CVE-2024-45394Secret encryption vulnerable to brute-force attacksAuthenticator-Extension · Authenticator · CVSS 8.8 · 2024-09-03 | 8.8 | 0.1% | 2024-09-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.