An account on a router, firewall, or other network device has a default, null, blank, or missing password.

The remote host is running OpenWrt, an open source Linux distribution for embedded devices, especially routers. 

It is currently configured without a password, which is the case by default.  Anyone can connect to the device via Telnet and gain administrative access to it.

The remote host is running MikroTik RouterOS without a password for its 'admin' account.  Anyone can connect to it and gain administrative access to it.

The remote Cisco router has a default password set. A remote, unauthenticated attacker can exploit this to gain administrative access.

Note: To avoid account lockouts and other adverse impacts on the target host, this plugin will only attempt up to three login combinations per host under default policy configurations. To test with additional login combinations, users will need to either disable 'Safe Checks' in their scan policy or use a PCI scan policy.

Be aware that disabling 'Safe Checks' can result in adverse impacts on target devices, so be sure to use discretion when disabling this option.

The remote device appears to be a Bay Networks Accelar 1200 Switch that can be accessed using default credentials.  An attacker could leverage this issue to gain administrative access to the affected device.  This password could also be potentially used to gain other sensitive information about the network from the device.

The remote device appears to be an Allied Telesyn router or switch that can be accessed using default credentials.  An attacker could leverage this issue to gain administrative access to the affected device.  This password could also be potentially used to gain other sensitive information about the network from the device.

The Allied Telesyn Router/Switch has the default password set.

The attacker could use this default password to gain remote access to your switch or router. This password could also be potentially used to gain other sensitive information about your network from the device.

The remote host appears to be an Avaya P330 Stackable Switch with its default password set. 

An attacker could use this default password to gain remote access to the affected switch.  This password could also be potentially used to gain other sensitive information about the remote network from the switch.

This host appears to be the running the Apache Tomcat Servlet engine with the default accounts still configured.
A potential intruder could reconfigure this service in a way that grants system access.

This device is a Motorola Vanguard router and has no password set.  An attacker can reconfigure this device without providing any authentication.

This system appears to be running the Enhydra application server configured with the default administrator password of 'enhydra'.  A potential intruder could reconfigure this service and use it to obtain full access to the system.

This WhatsUp Gold server still has the default password for the admin user account.  An attacker can use this account to probe other systems on the network and obtain sensitive information about the monitored systems.

The remote Linksys router accepts the default password 'admin' for the web administration console.  This console provides read/write access to the router's configuration.  An attacker could take advantage of this to reconfigure the router and possibly re-route traffic.

The Shiva LanRover has no password set for the root user account.  An attacker is able to telnet to this system and gain access to any phone lines attached to this device.  

Additionally, the LanRover can be used as a relay point for further attacks via the telnet and rlogin functionality available from the administration shell.

The remote host is running the Sun JavaServer.  This server has the default username and password of admin.  An attacker can use this to gain complete control over the web server configuration and possibly execute commands.

The remote switch/routers uses the default password.
This means that anyone who has (downloaded) a user manual can telnet to it and gain administrative access.

This AirConnect wireless access point still has the default password set for the web interface. This could be abused by an attacker to gain full control over the wireless network settings.

The remote F5 Networks device has the default password set for the 'support' user account.  This account normally provides read/write access to the web configuration utility.  An attacker could take advantage of this to reconfigure your systems and possibly gain shell access to the system with super-user privileges.

The pcAnywhere service does not require a password to access the desktop of this system.  If this machine is running Windows 95, 98, or ME, gaining full control of the machine is trivial.  If this system is running NT or 2000 and is currently logged out, an attacker can still spy on and hijack a legitimate user's session when they login.

The remote SiteScope web service has no password set.  An attacker who can connect to this server can view usernames and passwords stored in the preferences section or reconfigure the service.

The remote host appears to be a Cisco router or switch with no password set.  This can allow a remote attacker to login to the device and take control of it.

The 3Com Superstack 3 switch has the default passwords set. 

The attacker could use these default passwords to gain remote access to your switch and then reconfigure the switch.  These passwords could also be potentially used to gain sensitive information about your network from the switch.

The remote Shiva router uses the default password. This means that anyone who has (downloaded) a user manual can telnet to it and reconfigure it to lock you out of it, and to prevent you to use your internet connection.

It is possible to connect to the remote PostgreSQL database server using an unpassworded account. This may allow an attacker to launch further attacks against the database.

The remote router has no password. An intruder may connect to it and disable it easily.

ID	Name	Product	Family	Type	Severity
40354	OpenWrt Router with a Blank Password (telnet check)	Nessus	CGI abuses	Remote	critical
39420	MikroTik RouterOS with Blank Password (HTTP)	Nessus	Web Servers	Remote	critical
30213	MikroTik RouterOS with Blank Password (telnet check)	Nessus	Misc.	Remote	critical
23938	Cisco Device Default Password	Nessus	CISCO	Remote	critical
18415	Bay Networks Accelar 1200 Switch Default Password (password) for 'usrname' Account	Nessus	Misc.	Remote	critical
18414	Allied Telesyn Router/Switch Default Password	Nessus	Misc.	Remote	critical
18413	Allied Telesyn Router/Switch Web Interface Default Password	Nessus	Web Servers	Remote	high
17638	Avaya P330 Stackable Switch Default Password	Nessus	Misc.	Remote	critical
11204	Apache Tomcat Default Accounts	Nessus	Web Servers	Remote	high
11203	Motorola Vanguard with No Password (telnet check)	Nessus	Misc.	Remote	critical
11202	Enhydra Multiserver Default Password	Nessus	Web Servers	Remote	high
11004	Ipswitch WhatsUp Gold Default Admin Account	Nessus	CGI abuses	Remote	high
10999	Linksys Router Default Password	Nessus	CISCO	Remote	critical
10998	Shiva LanRover Blank Password	Nessus	Misc.	Remote	critical
10995	Sun JavaServer Default Admin Password	Nessus	CGI abuses	Remote	high
10989	Nortel/Bay Networks Default Password	Nessus	Misc.	Remote	high
10961	AirConnect Default Password	Nessus	Misc.	Remote	high
10820	F5 Device Default Support Password	Nessus	Misc.	Remote	critical
10798	Symantec pcAnywhere Service Unrestricted Access	Nessus	Windows	Remote	critical
10778	SiteScope Web Service Unpassworded Access	Nessus	CGI abuses	Remote	critical
10754	Cisco Multiple Devices Unpassworded Account	Nessus	CISCO	Remote	critical
10747	3Com Superstack 3 Switch Multiple Default Accounts	Nessus	Misc.	Remote	high
10500	Shiva Integrator Default Password	Nessus	Misc.	Remote	high
10483	PostgreSQL Default Unpassworded Account	Nessus	Databases	Remote	high
10345	Cayman DSL Router Unauthenticated Access	Nessus	Misc.	Remote	high

Detections

Analytics

CVE-1999-0508

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

high

critical

high

critical

high

high

critical

critical

high

high

high

critical

critical

critical

critical

high

high

high

high