Technique

default usernames and passwords

technique:default_usernames_and_passwords Also: default credentials

Weak configuration on perimeter security appliances that allowed attackers to regain brief access.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming INVOLVES Saudi Aramco cyber-attack (2012) Explicit 30

Claims

Saudi Aramco cyber-attack (2012) INVOLVES default usernames and passwords

Attackers briefly regained access because some perimeter security appliances retained default usernames and passwords.

Explicit Confidence 98% · Chris Kubecka EP 30 Details

“had left some of the stuff with default usernames and passwords on the network and security appliances”