Modicon FTP Default Account/Password Usage (SCADA)

critical Nessus Network Monitor Plugin ID 6277

Synopsis

The remote Modicon server is still configured with default credentials for its FTP service.

Description

The remote Modicon SCADA device is configured with the default user account of qbf77101 and the default password of hexakisoctahedron. These credentials were observed on the FTP port.

Solution

Change all default passwords upon server/software installation.

Plugin Details

Severity: Critical

ID: 6277

Family: SCADA

Published: 1/19/2012

Updated: 1/15/2016