Posts Tagged ‘FTP’

Dedicated Micros RAID Default FTP Credentials

January 17, 2014

The Dedicated Micros RAID unit comes with default FTP credentials according to the manual.

Open a FTP package and connect to the DVR (username=dmftp, password-ftp)

Dedicated Micros TransVu Default Credentials

January 14, 2014

The Dedicated Micros TransVu contains a default password according to the Vehicle Update Server user manual.

This software is interesting as there may be a remote information disclosure issue over wireless:

As a vehicle enters a private WiFi network area, the software interrogates the TransVu by sending a UDP command on port 4052 and registers the software currently installed.

By default the passwords below are used making it trivial to remotely determine the software on the TransVu unit:

Enter the username and password to allow access to the TransVu units (default is DM and Web).

However according to the actual TransVu Media Manager manual there are different defaults for FTP access:

The software will ask for the IP address and security information for the source unit. The default Username is dm and the default Password is ftp. Alternatively you can select to log in anonymously if no passwords have been set on the TransVu unit.

Schneider Modicon M340 for Ethernet Multiple Default Credentials

December 8, 2013

The Schneider Electric Modicon M340 for Ethernet (identifies as BMX P34 CPU B via HTTP, Shodan search) contains multiple default credentials according to the manual.

This device is marked as Schneider Electric and Telemecanique:

modicom-banner1

modicom-banner2

From the manual:

Using an FTP client, store your rules in the file:
/FLASH0/wwwroot/conf/NTP/customrules
user ID: ntpupdate
password: ntpupdate

Default FTP Setup page via HTTP
1 Enter the new username. (The default is USER.)
2 Enter the new password. (The default is USER.)

Default HTTP credentials
1 Enter the new username (default is USER).
2 Enter the new password (default is USER)

The BMX NOE 0110 and BMX NOR 0200H also have the default USER / USER account.

modicom