The account 'root' on the remote host has the password '!2345Asdfg'.
An attacker may leverage this issue to gain access, likely as an administrator, to the affected system.

The account 'guest' has no password set. An attacker may use it to gain further privileges on this system.

The account 'EZsetup' has no password set. An attacker may use it to gain further privileges on this system.

The account 'sync' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'toor' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'wank' has the password 'wank'.  An attacker may use this to gain further privileges on this system.

The account 'root' has the password 'D13hh['.  An attacker may use it to gain further privileges on this system. The presence of this account suggests the system may have the D13HH rootkit (typically found on Solaris systems).

The account 'db2inst1' has the password 'ibmdb2'.  An attacker may use this to gain further privileges on this system.

The account 'netscreen' on the remote host has the password '<<< %s(un='%s') = %u', a known backdoor password. The affected devices are firewalls and VPN gateways. A remote attacker can exploit this vulnerability to gain administrative access and monitor network traffic, deny network access, and alter device and firewall configurations.

Nessus was able to gain access to the Manager web application for the remote Tomcat server using a known set of credentials. A remote attacker can exploit this issue to install a malicious application on the affected server and run arbitrary code with Tomcat's privileges (usually SYSTEM on Windows, or the unprivileged 'tomcat' account on Unix). Note that worms are known to propagate this way.

Nessus was able to change the password for the 'admin' user of the NetIQ Privileged User Manager web application without authenticating, via a specially crafted POST request.

The remote host is running ProFTPd.  Due to a bug in the way the remote server is configured and the way it processes the USER and PASS commands, it is possible to log into the remote system by supplying invalid credentials.

The remote Cisco router has a default password set. A remote, unauthenticated attacker can exploit this to gain administrative access.

Note: To avoid account lockouts and other adverse impacts on the target host, this plugin will only attempt up to three login combinations per host under default policy configurations. To test with additional login combinations, users will need to either disable 'Safe Checks' in their scan policy or use a PCI scan policy.

Be aware that disabling 'Safe Checks' can result in adverse impacts on target devices, so be sure to use discretion when disabling this option.

The remote host is running MikroTik RouterOS without a password for its 'admin' account.  Anyone can connect to it and gain administrative access to it.

The remote FTP server accepts any user/password combination. This can allow remote attackers to access the FTP account, which can lead to information disclosure and uploads of arbitrary files on the remote host.

The 3Com Superstack 3 switch has the default passwords set. 

The attacker could use these default passwords to gain remote access to your switch and then reconfigure the switch.  These passwords could also be potentially used to gain sensitive information about your network from the switch.

This AirConnect wireless access point still has the default password set for the web interface. This could be abused by an attacker to gain full control over the wireless network settings.

The remote switch/routers uses the default password.
This means that anyone who has (downloaded) a user manual can telnet to it and gain administrative access.

The remote FTP server is affected by a remote code execution vulnerability due to an error in the Bash shell running on the remote host. A remote, unauthenticated attacker can execute arbitrary code on the remote host by sending a specially crafted request via the USER FTP command. The 'mod_exec' module exports the attacker-supplied username as an environment variable, which is then evaluated by Bash as code.

ID	名稱	產品	系列	已發布	已更新	嚴重性
122613	Default Password ('!2345Asdfg') for 'root' Account	Nessus	Default Unix Accounts	2019/3/6	2022/4/11	critical
11240	Unpassworded 'guest' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11241	Unpassworded 'EZsetup' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11247	Unpassworded 'sync' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11252	Unpassworded 'toor' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11260	Default Password (wank) for 'wank' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11262	Default Password (D13hh[) for 'root' Account	Nessus	Default Unix Accounts	2003/2/20	2022/4/11	critical
11859	Default Password (ibmdb2) for 'db2inst1' Account	Nessus	Default Unix Accounts	2003/10/1	2022/4/11	critical
87601	Juniper ScreenOS SSH / Telnet Authentication Backdoor	Nessus	Default Unix Accounts	2015/12/23	2018/7/27	critical
34970	Apache Tomcat Manager Common Administrative Credentials	Nessus	Web Servers	2008/11/26	2018/11/15	critical
62991	NetIQ Privileged User Manager Password Change Authentication Bypass (intrusive check)	Nessus	CGI abuses	2012/11/21	2021/1/19	medium
25040	ProFTPD Auth API Multiple Auth Module Authentication Bypass	Nessus	FTP	2007/4/19	2018/7/26	medium
23938	Cisco Device Default Password	Nessus	CISCO	2006/12/23	2024/11/1	critical
39420	MikroTik RouterOS with Blank Password (HTTP)	Nessus	Web Servers	2009/6/17	2018/11/15	critical
10305	WFTP Unpassworded Guest Account	Nessus	FTP	1999/6/22	2018/8/15	critical
10747	3Com Superstack 3 Switch Multiple Default Accounts	Nessus	Misc.	2001/8/29	2018/8/9	high
10961	AirConnect Default Password	Nessus	Misc.	2002/5/22	2020/6/12	high
10989	Nortel/Bay Networks Default Password	Nessus	Misc.	2002/6/5	2018/7/25	high
77986	GNU Bash Environment Variable Handling Code Injection via ProFTPD (Shellshock)	Nessus	FTP	2014/9/30	2024/1/16	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

medium

medium

critical

critical

critical

high

high

high

critical