Schneider Modicon M340 for Ethernet Multiple Default Credentials

The Schneider Electric Modicon M340 for Ethernet (identifies as BMX P34 CPU B via HTTP, Shodan search) contains multiple default credentials according to the manual.

This device is marked as Schneider Electric and Telemecanique:

modicom-banner1

modicom-banner2

From the manual:

Using an FTP client, store your rules in the file:
/FLASH0/wwwroot/conf/NTP/customrules
user ID: ntpupdate
password: ntpupdate

Default FTP Setup page via HTTP
1 Enter the new username. (The default is USER.)
2 Enter the new password. (The default is USER.)

Default HTTP credentials
1 Enter the new username (default is USER).
2 Enter the new password (default is USER)

The BMX NOE 0110 and BMX NOR 0200H also have the default USER / USER account.

modicom

Advertisements

Tags: , , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: