Vulnerability
vulnerability:weak_default_passwords
Also: default credentials, default passwords
Use of unchanged, widely known default usernames and passwords such as admin/admin or root/root.
Use of unchanged, widely known default usernames and passwords such as admin/admin or root/root.
“The oldest known computer vulnerability is weak default passwords.”
“admin/admin, admin with no password, root/root, and root with no password”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | EXPLOITS | Carna Botnet | Explicit | 13 |
| incoming | EXPLOITS | Aidra Botnet | Explicit | 13 |
| incoming | EXPLOITS | Lightaidra | Explicit | 13 |
Carna Botnet EXPLOITS weak default passwords
The Carna Botnet gained access to systems using weak default username/password combinations, including admin/admin and root/root.
Explicit Confidence 99% · Jack Rhysider EP 13 Details
“They used the following four username/password combinations: admin/admin, admin with no password, root/root, and root with no password.”
Aidra Botnet EXPLOITS weak default passwords
Aidra used the same weak default-password vulnerability as the Carna Botnet.
Explicit Confidence 97% · Jack Rhysider EP 13 Details
“someone else was also building a botnet and using the exact same vulnerabilities”
Lightaidra EXPLOITS weak default passwords
Parth said Lightaidra exploited the exact same vulnerability as the earlier botnets.
Explicit Confidence 99% · Parth Shukla EP 13 Details
“The tool called Lightaidra exploited the exact same vulnerability.”