Hardcoded credentials

2023-03-2821:15:00

PRIOn knowledge base

www.prio-n.com

hardcoded credentials

web management interface

nvd

full access

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full access to the web management interface configuration. The user is not visible in Usernames and Passwords menu list of the application and the password cannot be changed through any normal operation of the device.

CPENameOperatorVersion
osprey_pump_controller_firmwareeq1.01

CPE	Name	Operator	Version
	osprey_pump_controller_firmware	eq	1.01

References

www.cisa.gov/news-events/ics-advisories/icsa-23-082-06