Default Password (guest) for 'guest' Account

The account 'guest' has the password 'guest' set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "guest"; password = "guest"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11256;...

Default Password (satori) for 'rewt' Account

The account 'rewt' has the password 'satori'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "rewt"; password = "satori"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11265;...

ProxyView default undocumented password

-- Summary -- The Replicom ProxyView remote access unit ships with a default Administrator password for Embedded Windows NT. Any users with access to communicate with the ProxyView over the NetBIOS port TCP/139 can exploit this fact to take over the ProxyView unit. -- Product details -- From...

Nortel/Bay Networks/Xylogics Annex Default Password

The remote terminal server has the default password set. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. If modems are attached to this terminal server, it may allow unauthenticated, remote access to the network. This script was written by...

CVE-2002-0626

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities...

CVE-2002-0626

Polycom ViewStation up to version 7.2.3 (before 7.2.4) is affected by a default null password for the administrator account, enabling unauthorized activities by any user. The vulnerability is caused by the presence of a default credential and results in complete confidentiality, integrity, and av...

CVE-2002-0626

Polycom ViewStation before 7.2.4 has a default null password for the administrator account, which allows arbitrary users to conduct unauthorized activities...

CVE-2002-2020

Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed...

CVE-2002-0881

Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings...

CVE-2002-0858

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...

CVE-2002-0881

The CVE-2002-0881 entry affects Cisco IP Phone (VoIP) models 7910, 7940, and 7960. The underlying issue is the use of a default administrative password, enabling attackers with physical access to the phone to modify configuration settings. Connected documents corroborate the vulnerable components...

CVE-2002-0881

Cisco IP Phone VoIP models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings...

CVE-2002-0858

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges...

CVE-2000-1209

The "sa" account is installed with a default null password on 1 Microsoft SQL Server 2000, 2 SQL Server 7.0, and 3 Data Engine MSDE 1.0, including third party packages that use these products such as 4 Tumbleweed Secure Mail MMS 5 Compaq Insight Manager, and 6 Visio 2000, which allows remote...

CVE-2002-0774

Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed...

CVE-2002-0774

CVE-2002-0774 affects Hosting Controller. A default user (AdvWebadmin) with a default password is created, enabling privilege escalation if the password is not changed. The available sources describe this risk but do not provide a patch/version detail or explicit exploitation status in the provid...

CVE-2002-0667

Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone...

Linksys Router Default Password

The remote Linksys router accepts the default password 'admin' for the web administration console. This console provides read/write access to the router's configuration. An attacker could take advantage of this to reconfigure the router and possibly re-route traffic. This script is Copyright C...

Nortel/Bay Networks Default Password

The remote switch/routers uses the default password. This means that anyone who has downloaded a user manual can telnet to it and gain administrative access. This script was written by Rui Bernardino See the Nessus Scripts License for details Changes by Tenable: - only attempt to login if the...

AirConnect Default Password

This AirConnect wireless access point still has the default password set for the web interface. This could be abused by an attacker to gain full control over the wireless network settings. This script was written by H D Moore Information about the AP provided by Brian Caswell Chnages by Tenable :...