Sunday Shodan Defaults

Loxone “Miniserver based Home Automation solution allows you to control any task in and around your Smart House. From simple lighting and blind control and intelligent, cost-efficient zoned heating to burglar alarms.” (Shodan search)

Default web interface credentials: admin / admin


Synology DiskStation and other products use a web interface with a default of admin / (blank)


The manual for the addVANTAGE Pro 5 from Adcon Telemetry shows a default login:

addvantage


Cisco Router and Security Device Manager ironically has a default password and gives it to you when you connect to the device!

df ~$ telnet 10.200.40.1
Trying 10.200.40.1…
Connected to 10.200.40.1.
Escape character is ‘^]’.

———————————————————————–
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username “cisco”
with the password “cisco”. The default username and password have a privilege level of 15.

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username privilege 15 secret 0
no username cisco

Replace and with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
———————————————————————–

User Access Verification

Username:


Like the above, the Cisco Configuration Professional (Cisco CP) does the same thing but after logout the very first time the defaults don’t work. That means you can only use this if you login before the admin does like if they set it up and go to lunch.

df ~$ telnet 10.200.40.2
Trying 10.200.40.2…
Connected to 10.200.40.2.
Escape character is ‘^]’.

———————————————————————–

Cisco Configuration Professional (Cisco CP) is installed on this device.

This feature requires the one-time use of the username “cisco” with the

password “cisco”. These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN
CREDENTIALS

Here are the Cisco IOS commands.

username privilege 15 secret 0
no username cisco

Replace and with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the

QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp

———————————————————————–

User Access Verification

Username:


Foscam IP cameras have a web interface that has a default password. A video on the vendor page shows you to login as ‘admin’ with a password of ‘(blank)’.

Advertisements

Tags: ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: