The account 'root' has the password 'D13HH['.  An attacker may use this to gain further privileges on this system.

The account 'wank' has the password 'wank'.  An attacker may use this to gain further privileges on this system.

The account 'StoogR' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'glftpd' has the password 'glftpd'. An attacker may use this to gain further privileges on this system.

The account 'system' has the password 'manager'.  An attacker may use this to gain further privileges on this system.

The account 'guest' has the password 'guest' set. An attacker may use this to gain further privileges on this system.

The account 'root' on the remote host has the password 'root'.  An attacker may leverage this issue to gain total control of the affected system. 

Note that, while SKIDATA Freemotion.Gate controllers are known to use these credentials, this plugin reports any time it finds a host using these credentials, regardless of its type.

The account 'friday' has no password set. An attacker may use this to gain further privileges on this system.

The account 'hax0r' has no password set. An attacker may use this to gain further privileges on this system.

The account 'toor' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'tutor' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'backdoor' has no password set. An attacker may use it to gain further privileges on this system.

The account 'jack' has no password set. An attacker may use this to gain further privileges on this system.

The account 'date' has no password set. An attacker can leverage this to gain access to the system.

The account 'sync' has no password set.  An attacker may use this to gain further privileges on this system.

The account 'lp' has no password set. An attacker may use this to gain further privileges on this system.

The account 'OutOfBox' has no password set.  An attacker may use the account to gain further privileges on this system.

The account '4Dgifts' has no password set. An attacker may use it to gain further privileges on this system.

The account 'demos' has no password set. An attacker may use this account to gain further privileges on the system.

The account 'EZsetup' has no password set. An attacker may use it to gain further privileges on this system.

The account 'guest' has no password set. An attacker may use it to gain further privileges on this system.

ID	Name	Severity
11261	Default Password (D13HH[) for 'root' Account	critical
11260	Default Password (wank) for 'wank' Account	critical
11259	Unpassworded 'StoogR' Account	critical
11258	Default Password (glftpd) for 'glftpd' Account	critical
11257	Default Password (manager) for 'system' Account	critical
11256	Default Password (guest) for 'guest' Account	critical
11255	Default Password (root) for 'root' Account	critical
11254	Unpassworded 'friday' Account	critical
11253	Unpassworded 'hax0r' Account	critical
11252	Unpassworded 'toor' Account	critical
11251	Unpassworded 'tutor' Account	critical
11250	Unpassworded 'backdoor' Account	critical
11249	Unpassworded 'jack' Account	critical
11248	Unpassworded 'date' Account	critical
11247	Unpassworded 'sync' Account	critical
11246	Unpassworded 'lp' Account	critical
11245	Unpassworded 'root' Account	critical
11244	Unpassworded 'OutOfBox' Account	critical
11243	Unpassworded '4Dgifts' Account	critical
11242	Unpassworded 'demos' Account	critical
11241	Unpassworded 'EZsetup' Account	critical
11240	Unpassworded 'guest' Account	critical

Detections

Analytics

Default Unix Accounts Family for Nessus

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical