Default Password 'admin123' for 'admin' Account

#TRUSTED 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
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(111138);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/01/12");

  script_name(english:"Default Password 'admin123' for 'admin' Account");

  script_set_attribute(attribute:"synopsis", value:
"The remote system can be accessed with a default administrator
account.");
  script_set_attribute(attribute:"description", value:
"The account 'admin' on the remote host has the default password
'admin123'. A remote attacker can exploit this issue to gain
administrative access to the affected system.");
  script_set_attribute(attribute:"solution", value:
"Change the password for this account or disable it.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"manual");
  script_set_attribute(attribute:"cvss_score_rationale", value:"Default admin credential warns high CVSS score.");

  script_set_attribute(attribute:"plugin_publication_date", value:"2018/07/17");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"default_account", value:"true");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Default Unix Accounts");

  script_copyright(english:"This script is Copyright (C) 2018-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("find_service1.nasl", "ssh_detect.nasl", "account_check.nasl");
  script_exclude_keys("global_settings/supplied_logins_only");
  script_require_ports("Services/ssh", 22, "Services/telnet", 23);

  exit(0);
}

include("audit.inc");
include("default_account.inc");
include("global_settings.inc");
include("ssh_func.inc");
include("telnet_func.inc");
include("lists.inc");

if (supplied_logins_only) audit(AUDIT_SUPPLIED_LOGINS_ONLY);

if (! thorough_tests && ! get_kb_item("Settings/test_all_accounts"))
  exit(0, "Neither thorough_tests nor 'Settings/test_all_accounts' is set.");

account = "admin";
password = "admin123";
affected = FALSE;
ssh_ports = get_service_port_list(svc:"ssh", default:22);
telnet_ports = get_service_port_list(svc:"telnet", default:23);
ports_kbs = collib::remove_duplicates(make_list(ssh_ports, telnet_ports));

port = branch(ports_kbs);
if ((empty_or_null(port)) || (!get_port_state(port))) audit(AUDIT_NOT_LISTEN,'SSH/Telnet', port);

if (collib::contains(ssh_ports, port))
{
  affected = check_account(login:account, password:password, port:port, svc:"ssh");
}
else if (collib::contains(telnet_ports, port))
{
 affected = check_account(login:account, password:password, port:port, svc:"telnet");
}

if (affected)
{
  security_report_v4(port:port, severity:SECURITY_HOLE, extra:default_account_report());
}
else audit(AUDIT_HOST_NOT, "affected");