| Vendor |
Model |
Version |
Access Type |
Username |
Password |
Privileges |
Notes |
| 3COM |
CoreBuilder |
7000/6000/3500/2500 |
Telnet |
debug |
synnet |
|
|
| 3COM |
CoreBuilder |
7000/6000/3500/2500 |
Telnet |
tech |
tech |
|
|
| 3COM |
HiPerARC |
v4.1.x |
Telnet |
adm |
(none) |
|
|
| 3COM |
LANplex |
2500 |
Telnet |
debug |
synnet |
|
|
| 3COM |
LANplex |
2500 |
Telnet |
tech |
tech |
|
|
| 3COM |
LinkSwitch |
2000/2700 |
Telnet |
tech |
tech |
|
|
| Huawei |
E960 |
|
|
admin |
admin |
Admin |
|
| 3COM |
NetBuilder |
|
SNMP |
|
ILMI |
snmp-read |
|
| 3COM |
Netbuilder |
|
Multi |
admin |
(none) |
Admin |
|
| 3COM |
Office Connect ISDN Routers |
5×0 |
Telnet |
n/a |
PASSWORD |
Admin |
|
| 3COM |
SuperStack II Switch |
2200 |
Telnet |
debug |
synnet |
|
|
| 3COM |
SuperStack II Switch |
2700 |
Telnet |
tech |
tech |
|
|
| 3COM |
OfficeConnect 812 ADSL |
|
Multi |
adminttd |
adminttd |
Admin |
|
| 3COM |
Wireless AP |
ANY |
Multi |
admin |
comcomcom |
Admin |
Works on all 3com wireless APs |
| 3COM |
CellPlex |
7000 |
Telnet |
tech |
tech |
User |
|
| 3COM |
cellplex |
7000 |
Telnet |
admin |
admin |
Admin |
|
| 3COM |
cellplex |
7000 |
|
operator |
(none) |
Admin |
|
| 3COM |
HiPerARC |
v4.1.x |
Telnet |
adm |
(none) |
Admin |
|
| 3COM |
3Com SuperStack 3 Switch 3300XM |
|
|
security |
security |
Admin |
|
| 3COM |
superstack II |
1100/3300 |
|
3comcso |
RIP000 |
initialize |
resets all pws to defaults |
| 3COM |
LANplex |
2500 |
Telnet |
tech |
(none) |
Admin |
|
| 3COM |
CellPlex |
|
HTTP |
admin |
synnet |
Admin |
|
| 3COM |
NetBuilder |
|
|
(none) |
admin |
User |
SNMP_READ |
| 3COM |
SuperStack II Switch |
2700 |
Telnet |
tech |
tech |
Admin |
|
| 3COM |
CellPlex |
7000 |
Telnet |
root |
(none) |
Admin |
|
| 3COM |
HiPerACT |
v4.1.x |
Telnet |
admin |
(none) |
Admin |
|
| 3COM |
CellPlex |
7000 |
Telnet |
tech |
(none) |
Admin |
|
| 3COM |
CellPlex |
7000 |
Telnet |
admin |
admin |
Admin |
|
| 3com |
CellPlex |
7000 |
Telnet |
tech |
tech |
Admin |
|
| 3com |
super |
|
Telnet |
admin |
(none) |
Admin |
|
| 3com |
cellplex |
7000 |
Multi |
admin |
admin |
Admin |
RS-232/telnet |
| 3COM |
SuperStack 3 |
4XXX |
Multi |
admin |
(none) |
Admin |
|
| 3COM |
SuperStack 3 |
4XXX |
Multi |
monitor |
monitor |
User |
|
| 3COM |
SuperStack 3 |
4400-49XX |
Multi |
manager |
manager |
User can access/change operational setting but not security settings |
|
| 3com |
CellPlex |
7000 |
Telnet |
root |
(none) |
Admin |
|
| 3com |
Netbuilder |
|
Multi |
admin |
(none) |
Admin |
|
| 3com |
cellplex |
7000 |
Telnet |
operator |
(none) |
Admin |
|
| 3com |
OfficeConnect 812 ADSL |
01.50-01 |
Multi |
admin |
(none) |
Admin |
|
| 3com |
cellplex |
|
Multi |
admin |
admin |
Admin |
|
| 3com |
HiPerACT |
v4.1.x |
Telnet |
admin |
(none) |
Admin |
|
| 3com |
3c16405 |
|
Multi |
n/a |
(none) |
Admin |
|
| 3com |
3c16405 |
|
Console |
Administrator |
(none) |
Admin |
|
| 3com |
Switch |
3300XM |
Multi |
admin |
admin |
Admin |
|
| 3com |
SS III Switch |
4xxx (4900 – sure) |
Telnet |
recovery |
recovery |
resets_all_to_default |
u need to power off unit. tbl_ |
| 3com |
OfficeConnect Wireless 11g Cable/DSL Gateway |
|
HTTP |
(none) |
admin |
Admin |
|
| 3COM |
Netbuilder |
|
HTTP |
Root |
(none) |
Admin |
http://10.1.0.1 |
| 3com |
3C16405 |
|
Multi |
admin |
(none) |
Admin |
|
| 3COM |
3C16450 |
|
Multi |
admin |
(none) |
Admin |
telnet or serial |
| 3COM |
3C16406 |
|
Multi |
admin |
(none) |
Admin |
telnet or serial |
| 3com |
OfficeConnect 812 ADSL |
01.50-01 |
Multi |
admin |
(none) |
Admin |
|
| 3com |
cellplex |
|
Multi |
n/a |
(none) |
Admin |
|
| 3com |
cellplex |
|
Multi |
admin |
admin |
Admin |
|
| 3com |
HiPerACT |
v4.1.x |
Telnet |
admin |
(none) |
Admin |
|
| 3com |
3c16405 |
|
Console |
Administrator |
(none) |
Admin |
|
| 3com |
CellPlex |
7000 |
Telnet |
tech |
(none) |
Admin |
|
| 3com |
Switch |
3300XM |
Multi |
admin |
admin |
Admin |
|
| 3com |
SS III Switch |
4xxx (4900 – sure) |
Telnet |
recovery |
recovery |
resets_all_to_default |
u need to power off unit. tbl_ |
| 3com |
OfficeConnect Wireless 11g Cable/DSL Gateway |
|
HTTP |
(none) |
admin |
Admin |
|
| 3com |
3CRADSL72 |
1.2 |
Multi |
(none) |
1234admin |
Admin |
snmp open by default with public / private community |
| 3com |
CB9000 / 4007 |
3 |
Console |
Type User: FORCE |
(none) |
Admin |
This will recover a lost password and reset the switch config to Factory Default |
| 3com |
officeconnect |
|
Multi |
n/a |
(none) |
Admin |
|
| 3Com |
Internet Firewall |
3C16770 |
HTTP |
admin |
password |
Admin |
|
| 3com |
superstack II Netbuilder |
11.1 |
Multi |
n/a |
(none) |
Admin |
|
| 3COM |
Office Connect ISDN Routers |
5×0 |
Telnet? |
n/a |
PASSWORD |
Admin |
|
| 3M |
VOL-0215 etc. |
|
SNMP |
volition |
volition |
Admin |
for Volition fibre switches |
| Accelerated Networks |
DSL CPE and DSLAM |
|
Telnet |
sysadm |
anicust |
|
|
| ACCTON |
Wirelessrouter |
T-online |
HTTP |
none |
0 |
Admin |
YEAHH |
| accton t-online |
accton |
|
Multi |
(none) |
0 |
Admin |
|
| accton t-online |
accton |
|
Multi |
(none) |
0 |
Admin |
|
| Aceex |
Modem ADSL Router |
|
HTTP |
admin |
(none) |
Admin |
|
| Aceex |
Modem ADSL Router |
|
HTTP |
admin |
(none) |
Admin |
|
| ADC Kentrox |
Pacesetter Router |
|
Telnet |
n/a |
secret |
|
|
| ADIC |
Scalar 100/1000 |
|
HTTP |
admin |
secure |
Admin |
|
| ADIC |
Scalar i2000 |
|
Multi |
admin |
password |
Admin |
|
| adtran |
MX2800 |
|
Telnet |
n/a |
adtran |
Admin |
hit enter a few times |
| adtran |
Smart 16/16e |
|
Telnet |
n/a |
(none) |
Admin |
hit enter a few times |
| adtran |
Atlas 800/800Plus/810Plus/550 |
|
Telnet |
n/a |
Password |
Admin |
crtl-L |
| adtran |
Smart 16/16e |
|
Telnet |
n/a |
PASSWORD |
Admin |
hit enter a few times |
| adtran |
NxIQ |
|
Telnet |
n/a |
adtran |
Admin |
hit enter a few times |
| adtran |
TSU IQ/DSU IQ |
|
Telnet |
n/a |
(none) |
Admin |
hit enter a few times |
| adtran |
Express 5110/5200/5210 |
|
Telnet |
n/a |
adtran |
Admin |
hit enter a few times |
| adtran |
Agent Card |
|
Telnet |
n/a |
ADTRAN |
Admin |
ctrl-PTT |
| adtran |
TSU Router Module/L128/L768/1.5 |
|
Telnet |
n/a |
(none) |
Admin |
hit enter a few times |
| adtran |
T3SU 300 |
|
Telnet |
n/a |
adtran |
Admin |
Hit enter a few times |
| Alcatel |
PBX |
4400 |
Port 2533 |
kermit |
kermit |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
dhs3mt |
dhs3mt |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
at4400 |
at4400 |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
mtch |
mtch |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
mtcl |
mtcl |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
root |
letacla |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
dhs3pms |
dhs3pms |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
adfexc |
adfexc |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
client |
client |
unknown |
|
| Alcatel |
PBX |
4400 |
Port 2533 |
install |
llatsni |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
PBX |
4400 |
Port 2533 |
halt |
tlah |
unknown |
thanks to Nicolas Gregoire |
| Alcatel |
Office 4200 |
|
Multi |
n/a |
1064 |
Admin |
by Bazille |
| Alcatel |
OmniStack 6024 |
|
Telnet |
admin |
switch |
Admin |
|
| Alcatel |
Omnistack/Omniswitch |
|
Telnet/Console |
diag |
switch |
Admin |
|
| Alcatel |
Omnistack/omniswitch |
|
Telnet |
diag |
switch |
Admin |
|
| Alcatel |
Timestep VPN 1520 |
3.00.026 |
Permit config and console |
root |
permit |
Admin |
Perm/Config port 38036 |
| Alcatel |
OXO |
1.3 |
Multi |
(none) |
admin |
User |
|
| Allied |
Telesyn |
|
Multi |
manager |
friend |
Admin |
|
| Allied Telesyn |
AT-8024(GB) |
|
Console |
n/a |
admin |
Admin |
|
| Allied Telesyn |
AT-8024(GB) |
|
HTTP |
manager |
admin |
Admin |
|
| Allied Telesyn |
AT Router |
|
HTTP |
root |
(none) |
Admin |
|
| ALLNET |
T-DSL Modem |
Software Version: v1.51 |
HTTP |
admin |
admin |
Admin |
|
| Allnet |
ALL0275 802.11g AP |
1.0.6 |
HTTP |
none |
admin |
Admin |
|
| Alteon |
ACEDirector3 |
|
console |
admin |
(none) |
|
|
| Alteon |
ACEswitch |
180e |
HTTP |
admin |
admin |
Admin |
|
| Alteon |
ACEswitch |
180e |
Telnet |
admin |
(none) |
|
|
| Alteon |
ACEswitch |
180e |
HTTP |
admin |
linga |
Admin |
none |
| Alteon |
AD4 |
9 |
Console |
admin |
admin |
Admin |
Factory default |
| AMBIT |
ADSL |
|
Telnet |
root |
(none) |
Admin |
|
| Ambit |
Cable Modem 60678eu |
1.12 |
Multi |
root |
root |
Admin |
|
| Ambit |
Cable Modem |
|
Multi |
root |
root |
Admin |
Time Warner Cable issued modem |
| Ambit |
ntl:home 200 |
2.67.1011 |
HTTP |
root |
root |
Admin |
This is the cable modem supplied by NTL in the UK |
| Amitech |
wireless router and access point 802.11g 802.11b |
any |
HTTP |
admin |
admin |
Admin |
Web interface is on 192.168.1.254 available on the LAN ports of the AP. |
| Andover Controls |
Infinity |
any |
Console |
acc |
acc |
Admin |
Building managment system |
| AOC |
zenworks 4.0 |
|
Multi |
n/a |
admin |
Admin |
|
| APC |
9606 Smart Slot |
|
Telnet |
n/a |
backdoor |
Admin |
|
| APC |
USV Network Management Card |
|
SNMP |
n/a |
TENmanUFactOryPOWER |
Admin |
nachzulesen unter http://www.heise.de/security/news/meldung/44899 gruss HonkHase |
| apc |
Smartups 3000 |
|
HTTP |
apc |
apc |
Admin |
By Sentinel Software.net |
| APC |
UPSes (Web/SNMP Mgmt Card) |
|
HTTP |
device |
device |
Admin |
Secondary access account (next to apc/apc) |
| APC |
Smart UPS |
|
Multi |
apc |
apc |
Admin |
|
| Apple |
AirPort Base Station (Graphite) |
2 |
Multi |
(none) |
public |
public |
See Apple article number 58613 for details |
| Apple |
Airport Base Station (Dual Ethernet) |
2 |
Multi |
n/a |
password |
Guest |
See Apple article number 106597 for details |
| Apple |
Airport Extreme Base Station |
2 |
Multi |
n/a |
admin |
Guest |
see Apple article number 107518 for details |
| Arescom |
modem/router |
10XX |
Telnet |
n/a |
atc123 |
Admin |
|
| ARtem |
ComPoint – CPD-XT-b |
CPD-XT-b |
Telnet |
(none) |
admin |
Admin |
|
| Asante |
IntraSwitch |
|
multi |
IntraSwitch |
Asante |
Admin |
|
| Asante |
IntraStack |
|
multi |
IntraStack |
Asante |
Admin |
|
| Asante |
FM2008 |
|
Telnet |
superuser |
(none) |
Admin |
|
| Ascend |
Yurie |
|
Multi |
readonly |
lucenttech2 |
|
|
| Ascend |
Router |
|
Telnet |
n/a |
ascend |
Admin |
|
| Ascend |
Sahara |
|
Multi |
root |
ascend |
|
|
| Ascom |
Ascotel PBX |
ALL |
Multi |
(none) |
3ascotel |
Admin |
no user req. _by DTK |
| Aspect |
ACD |
6 |
HTTP |
customer |
none |
User |
views error logs |
| Aspect |
ACD |
6 |
Oracle |
DTA |
TJM |
User |
|
| Aspect |
ACD |
7 |
Oracle |
DTA |
TJM |
User |
|
| Aspect |
ACD |
8 |
Oracle |
DTA |
TJM |
User |
|
| AVAYA |
g3R |
v6 |
Console |
root |
ROOT500 |
Admin |
|
| Avaya |
Definity |
G3Si |
Multi |
craft |
(none) |
Admin |
|
| Avaya |
Cajun Pxxx |
|
Multi |
root |
root |
Admin |
|
| Avaya |
Cajun |
P550R P580 P880 and P882 |
Multi |
diag |
danger |
Developer |
|
| Avaya |
Cajun |
P550R P580 P880 and P882 |
Multi |
manuf |
xxyyzz |
Developer |
|
| Avaya |
Pxxx |
05/02/2014 |
Multi |
diag |
danger |
Admin |
|
| Avaya |
Pxxx |
05/02/2014 |
Multi |
manuf |
xxyyzz |
Admin |
|
| AVAYA |
Cajun P33x |
firmware before 3.11.0 |
SNMP |
n/a |
admin |
Admin |
check the Bugtraq archives for more information |
| Avaya |
definity |
up to rev. 6 |
any |
craft |
crftpw |
Admin |
|
| Avaya |
CMS Supervisor |
11 |
Console |
root |
cms500 |
Admin |
|
| Axis |
NETCAM |
200/240 |
Telnet |
root |
pass |
Admin |
|
| Axis |
All Axis Printserver |
All |
Multi |
root |
pass |
Admin |
|
| Axis |
Webcams |
|
HTTP |
root |
pass |
Admin |
|
| Axis |
540/542 Print Server |
|
Multi |
root |
pass |
Admin |
|
| axis |
2100 |
|
Multi |
n/a |
(none) |
Admin |
|
| Axis |
NETCAM |
200/240 |
|
root |
pass |
|
|
| Bay Networks |
Switch |
350T |
Telnet |
n/a |
NetICs |
Admin |
|
| Bay Networks |
SuperStack II |
|
Telnet |
security |
security |
Admin |
|
| Bay Networks |
Router |
|
Telnet |
User |
(none) |
User |
|
| Bay Networks |
Router |
|
Telnet |
Manager |
(none) |
Admin |
|
| Bay Networks |
Router |
|
|
User |
(none) |
User |
|
| Bay Networks |
SuperStack II |
|
|
security |
security |
Admin |
|
| Bay Networks |
Switch |
350T |
|
n/a |
NetICs |
Admin |
|
| Belkin |
F5D6130 |
|
SNMP |
(none) |
MiniAP |
Admin |
Wireless Acess Point IEEE802.11b |
| Belkin |
F5D7150 |
FB |
Multi |
n/a |
admin |
Admin |
|
| Billion |
Bipac 5100 |
|
HTTP |
admin |
admin |
Admin |
|
| Bintec |
Bianka Routers |
|
Multi |
admin |
bintec |
Admin |
|
| BinTec |
Bianca/Brick |
XM-5.1 |
SNMP |
n/a |
snmp-Trap |
read/write |
by rootkid |
| BinTec |
x1200 |
37834 |
Multi |
admin |
bintec |
Admin |
|
| BinTec |
x2300i |
37834 |
Multi |
admin |
bintec |
Admin |
|
| BinTec |
x3200 |
37834 |
Multi |
admin |
bintec |
Admin |
|
| BMC |
Patrol |
6 |
Multi |
patrol |
patrol |
User |
|
| BMC Software |
Patrol |
all |
BMC unique |
Administrator |
the same all over |
Admin |
this default user normally for ALL system in this area with one Password |
| Breezecom |
Breezecom Adapters |
3.x |
|
n/a |
Master |
Admin |
|
| Breezecom |
Breezecom Adapters |
2.x |
|
n/a |
laflaf |
Admin |
|
| Breezecom |
Breezecom Adapters |
4.4.x |
Console |
n/a |
Helpdesk |
Admin |
|
| Breezecom |
Breezecom Adapters |
4.x |
|
n/a |
Super |
|
|
| Breezecom |
Breezecom Adapters |
3.x |
|
n/a |
Master |
|
|
| Breezecom |
Breezecom Adapters |
2.x |
|
n/a |
laflaf |
|
|
| Brocade |
Fabric OS |
All |
Multi |
root |
fivranne |
Admin |
Gigiabit SAN (by Nicolas Gregoire) |
| Brocade |
Silkworm |
all |
Multi |
admin |
password |
Admin |
Also on other Fiberchannel switches |
| Brocade |
Fabric OS |
|
Multi |
admin |
password |
Admin |
Gigabit SAN |
| Brother |
NC-3100h |
|
|
(none) |
access |
network board access |
|
| Brother |
NC-4100h |
|
|
(none) |
access |
network board access |
|
| Brother |
HL-1270n |
|
Multi |
n/a |
access |
network board access |
|
| Buffalo |
Wireless Broadband Base Station-g |
WLA-G54 WBR-G54 |
HTTP |
root |
(none) |
Admin |
http://192.168.11.1 |
| Cabletron |
Netgear modem/router and SSR |
|
|
netman |
(none) |
Admin |
|
| Cayman |
Cayman DSL |
|
|
n/a |
(none) |
Admin |
|
| Celerity |
Mediator |
Multi |
Multi |
mediator |
mediator |
User |
|
| Celerity |
Mediator |
|
Multi |
root |
Mau'dib |
Admin |
Assumption: the password is Mua'dib |
| Cellit |
CCPro |
|
Multi |
cellit |
cellit |
Admin |
|
| Checkpoint |
SecurePlatform |
NG FP3 |
Console |
admin |
admin |
Admin |
|
| CipherTrust |
IronMail |
Any |
Multi |
admin |
password |
Admin |
|
| CISCO |
Cache Engine |
|
Console |
admin |
diamond |
Admin |
|
| Cisco |
ConfigMaker |
|
|
cmaker |
cmaker |
Admin |
|
| cisco |
cva 122 |
|
Telnet |
admin |
admin |
Admin |
|
| Cisco |
CNR |
All |
CNR GUI |
admin |
changeme |
Admin |
This is the default password for Cisco Network Registrar |
| Cisco |
Netranger/secure IDS |
|
Multi |
netrangr |
attack |
|
|
| Cisco |
BBSM |
5.0 and 5.1 |
Telnet or Named Pipes |
bbsd-client |
changeme2 |
database |
The BBSD Windows Client password will match the BBSD MSDE Client password |
| Cisco |
BBSD MSDE Client |
5.0 and 5.1 |
Telnet or Named Pipes |
bbsd-client |
NULL |
database |
The BBSD Windows Client password will match the BBSD MSDE Client password |
| Cisco |
BBSM Administrator |
5.0 and 5.1 |
Multi |
Administrator |
changeme |
Admin |
|
| Cisco |
Netranger/secure IDS |
3.0(5)S17 |
Multi |
root |
attack |
Admin |
must be changed at the first connection |
| Cisco |
BBSM MSDE Administrator |
5.0 and 5.1 |
IP and Named Pipes |
sa |
(none) |
Admin |
|
| Cisco |
Catalyst 4000/5000/6000 |
All |
SNMP |
(none) |
public/private/secret |
RO/RW/RW+change SNMP config |
default on All Cat switches running the native CatOS CLI software. |