Risks of Default Passwords on the Internet

ronjor · Jun 24, 2013

Original release date: June 24, 2013

Systems Affected

Any system using password authentication accessible from the internet may be affected. Critical infrastructure and other important embedded systems, appliances, and devices are of particular concern.

Overview

Attackers can easily identify and access internet-connected systems that use shared default passwords. It is imperative to change default manufacturer passwords and restrict network access to critical and important systems.

Description
What Are Default Passwords?

Factory default software configurations for embedded systems, devices, and appliances often include simple, publicly documented passwords. These systems usually do not provide a full operating system interface for user management, and the default passwords are typically identical (shared) among all systems from a vendor or within product lines. Default passwords are intended for initial testing, installation, and configuration operations, and many vendors recommend changing the default password before deploying the system in a production environment.

What Is the Risk?

Attackers can easily obtain default passwords and identify internet-connected target systems. Passwords can be found in product documentation and compiled lists available on the internet. It is possible to identify exposed systems using search engines like Shodan, and it is feasible to scan the entire IPv4 internet, as demonstrated by such research as
Click to expand...

https://www.us-cert.gov/ncas/alerts/TA13-175A

TheKid7 · Jul 2, 2013

Brute-force cyberattacks against critical infrastructure, energy industry, intensify

Brute-force cyberattacks against critical infrastructure, energy industry, intensify:

Do you leave the factory-default password on your devices that are connected to the Internet? While I certainly hope not, and this may seem like a no-brainer, how much more important is it to change manufacturers’ passwords on our nation’s critical infrastructure control systems? DHS’s Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) warned that attacks against critical infrastructure are growing, with more than 200 brute-force cyberattack incidents reported between October and May, surpassing the 198 total attacks in all of fiscal year 2012.

The newly issued ICS-CERT Monitor report [pdf] states that more than half of the attacks were against the energy sector. For example, 49 malicious IPs attacked natural gas companies across the Midwest and Plains. “While none of the brute force attempts were successful,” in only the first half of fiscal year 2013, ICS-CERT deployed onsite teams five different times, three times to energy sector companies and twice to manufacturers. “All of the onsite incident response engagements involved sophisticated threat actors who had successfully compromised and gained access to business networks.” In comparison, the ICS-CERT onsite teams were deployed only six times for all of fiscal year 2012...........
Click to expand...

http://blogs.computerworld.com/cybe...ical-infrastructure-energy-industry-intensify

Log in or Sign up

Risks of Default Passwords on the Internet

ronjor Global Moderator

TheKid7 Registered Member

Log in or Sign up

Risks of Default Passwords on the Internet

ronjor Global Moderator

TheKid7 Registered Member

Useful Searches