On this page

CWE-798: Use of Hard-coded Credentials

Weakness Summary

The product contains hard-coded credentials, such as a password or cryptographic key.

  • Canonical source: MITRE CWE-798
  • Published Atomicorp CVE observations: 12
  • Distinct affected products in those observations: 12
  • Active Atomicorp rules associated with this weakness: 38

Atomicorp Research Context

Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.

The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.

A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.

Selected Published CVE Observations

CVEVulnerabilityProductAtomicorp findingObserved rules
CVE-2012-5686ZPanel 10.0.1 - Cross-Site Request Forgery / Cross-Site Scripting / SQL Injection / Password ResetzpanelAttack Blocked by Atomicorp340016 , 340017 , 340147 , 340148 , 341256 , 342259 , 346755 , 350148 , 360147 , 360148 , 390704
CVE-2014-9614Netsweeper 4.0.5 - Default Weak AccountnetsweeperAttack Blocked by Atomicorp392301
CVE-2015-4667Xceedium Xsuite - Multiple VulnerabilitiesxsuiteAttack Blocked by Atomicorp320464 , 320465 , 333141 , 340023 , 340099 , 340147 , 340148 , 341099 , 341256 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 347198 , 350148 , 390726 , 392301 , 392647 , 392648
CVE-2016-5678NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilitiesnvrmini 2Attack Blocked by Atomicorp392301
CVE-2017-7462Intellinet NFC-30IR Camera - Multiple Vulnerabilitiesnfc-30ir firmwareAttack Blocked by Atomicorp330925 , 344360 , 347009
CVE-2019-1935Cisco UCS Director_ Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data - Multiple Vulnerabilitiesintegrated management controller supervisorAttack Blocked by Atomicorp344362 , 344363 , 344370 , 345493 , 350147 , 360151 , 390724 , 390727 , 392301 , 392648
CVE-2022-34045WAVLINK WN530HG4 - Improper Access Controlwl-wn530hg4 firmwareAttack Blocked by Atomicorp390716
CVE-2023-22463KubePi JwtSigKey - Admin Authentication BypasskubepiAttack Blocked by Atomicorp392301
CVE-2024-3408D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code ExecutiondtaleAttack Blocked by Atomicorp340087 , 340095
CVE-2026-44825Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default CredentialssolrAttack Blocked by Atomicorp330925
CVE-2024-7332TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerabilitycp450 firmwareAttack Blocked by Atomicorp390716
CVE-2026-19900LB-LINK Routers - Unauthenticated Command Injectionbl-wr9000 firmwareAttack Blocked by Atomicorp390904

Associated Atomicorp WAF Rules

RuleStatusBehavior
320464Activedisruptive (deny)
320465Activedisruptive (deny)
330925Activedisruptive (deny)
333141Activedisruptive (deny)
340016Activedisruptive (deny)
340017Activedisruptive (deny)
340023Activedisruptive (deny)
340087Activedisruptive (deny)
340095Activedisruptive (deny)
340099Activedisruptive (deny)
340147Activedisruptive (deny)
340148Activedisruptive (deny)
341099Activedisruptive (deny)
341256Activedisruptive (deny)
342259Activedisruptive (deny)
344360Activedisruptive (deny)
344361Activedisruptive (deny)
344362Activedisruptive (deny)
344363Activedisruptive (deny)
344370Activedisruptive (deny)
345493Activenon-disruptive (pass)
346755Activedisruptive (deny)
347009Activedisruptive (deny)
347198Activedisruptive (deny)
350147Activedisruptive (deny)
350148Activedisruptive (deny)
360147Activedisruptive (deny)
360148Activedisruptive (deny)
360151Activedisruptive (deny)
390704Activedisruptive (deny)
390716Activedisruptive (deny)
390724Activedisruptive (deny)
390726Activedisruptive (deny)
390727Activedisruptive (deny)
390904Activedisruptive (deny)
392301Activedisruptive (deny)
392647Activedisruptive (deny)
392648Activedisruptive (deny)

MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:

CAPEC-191 , CAPEC-70