standard

CWE-321: Use of Hard-coded Cryptographic Key

Common Weakness Enumeration class for software that ships with a cryptographic key embedded in the product, so anyone who obtains the key can decrypt protected data.

Known aliases

CWE-321

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 publisher

A hard-coded key opens any PIMBoards project file an attacker can read

CISA's advisory covers four CVEs in AVEVA Pipeline Integrity Monitor builds up to 2025 SP1 P1. The fix reaches only the project files you can migrate, and the migration to SP1 P2 cannot be undone.

Publishers:cisa.gov

Reality

Evidence62
Adoption18
Hype gap+5
Incentives55
Confidence58