Archive for December, 2014

Carlo Gavazzi PowerSoft Multiple Default Accounts

December 23, 2014

Carlo Gavazzi PowerSoft is a SCADA system for energy management. According to the vendor page:

Carlo Gavazzi is an international group active in designing, manufacturing and marketing electronic equipment.

The Group’s products (sensors, monitoring relays, timers, energy management systems, solid state-relays, safety devices, fieldbus systems) provide automation solutions for the global markets of industrial and building automation.

The manual shows that it has several default accounts:

2.4 USERS AND PASSWORDS
The installing program sets two default users on the system:
User 1:
Name: admin
Password: admin
Level: Administrator
User 2:
Name: user
Password: user
Level: User
These default users can access all the PowerSoft functions (according to the relevant level, see below) but, for safety reasons, it is suggested to create at least a new “Administrator” user (or more of them and the required simple “Users”= and then delete both the default users.
The “User” can access all the data, acknowledge the alarms, and ask for any report, also via web-server.
The “Administrator” can access all the “User’s functions and, in addition, can configure Powersoft and all the relevant modules
A user without the password can only access the real-time values and display the active alarms list.

Advertisements