# SCADA Default Password
###### tags: `OT`

<div>
<table>
<thead>
<tr>
<th>Product</th>
<th>Vendor</th>
<th>Type</th>
<th>Username:Password</th>
</tr>
</thead>
<tbody>
<tr data-state="exploits">
<td>AC 800M</td>
<td>ABB</td>
<td>Controller</td>
<td>service:ABB800xA</td>
</tr>
<tr data-state="exploits">
<td>SREA-01</td>
<td>ABB</td>
<td>Ethernet Adapter Module</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>RTU500</td>
<td>ABB</td>
<td>Ethernet Adapter Module</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>netCADOPS Web Application</td>
<td>ABB</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Ellipse</td>
<td>ABB</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>ATI Emergency Mass Notification Systems</td>
<td>Acoustic Technology, Inc. (ATI Systems)</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>A850 Telemetry Gateway</td>
<td>Adcon Telemetry</td>
<td>Base Station</td>
<td>root:840sw</td>
</tr>
<tr data-state="exploits">
<td>A850 Telemetry Gateway (ver2)</td>
<td>Adcon Telemetry</td>
<td>Base Station</td>
<td>root:840sw</td>
</tr>
<tr data-state="exploits">
<td>A440 Wireless Modem</td>
<td>Adcon Telemetry</td>
<td>Base Station</td>
<td>root:840sw</td>
</tr>
<tr data-state="exploits">
<td>addVANTAGE Pro 6.1, 6.5</td>
<td>Adcon Telemetry</td>
<td>HMI</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>SNMP-1000, MIC-3924</td>
<td>Advantech</td>
<td>system management module, intelligent chassis management module</td>
<td>advantech:admin</td>
</tr>
<tr data-state="exploits">
<td>Advantech WebAccess browser-based HMI and SCADA software</td>
<td>Advantech</td>
<td>browser-based HMI and SCADA software</td>
<td>admin:blank</td>
</tr>
<tr data-state="exploits">
<td>EKI-7659C</td>
<td>Advantech</td>
<td>industrial switch</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>EKI-7657C</td>
<td>Advantech</td>
<td>industrial switch</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>ADAM-6200 Series</td>
<td>Advantech</td>
<td>Intelligent Ethernet I/O Module</td>
<td>root:00000000</td>
</tr>
<tr data-state="exploits">
<td>ADAM-6050W</td>
<td>Advantech</td>
<td>I/O module</td>
<td>root:00000000</td>
</tr>
<tr data-state="exploits">
<td>ADAM-3600-A1F</td>
<td>Advantech</td>
<td>Remote I/O Module</td>
<td>Root:00000000, Admin:00000000, User:00000000</td>
</tr>
<tr data-state="exploits">
<td>OmniSwitch 6250</td>
<td>Alcatel-Lucent</td>
<td>switch</td>
<td>admin:switch</td>
</tr>
<tr data-state="exploits">
<td>AT-IE200-6GT (IE200 Series)</td>
<td>Allied Telesis</td>
<td>Industrial Ethernet Switches</td>
<td>manager:friend</td>
</tr>
<tr data-state="exploits">
<td>AT-IE200-6GP (IE200 Series)</td>
<td>Allied Telesis</td>
<td>Industrial Ethernet Switches</td>
<td>manager:friend</td>
</tr>
<tr data-state="exploits">
<td>AT-IE200-6FT (IE200 Series)</td>
<td>Allied Telesis</td>
<td>Industrial Ethernet Switches</td>
<td>manager:friend</td>
</tr>
<tr data-state="exploits">
<td>AT-IE200-6FP (IE200 Series)</td>
<td>Allied Telesis</td>
<td>Industrial Ethernet Switches</td>
<td>manager:friend</td>
</tr>
<tr data-state="exploits">
<td>KVGC202/EN/M/E11</td>
<td>Alstom</td>
<td>Relays</td>
<td>AAAA</td>
</tr>
<tr data-state="exploits">
<td>MiCOM P141/P142/P143/P342/P343/P344/P345/P346/P391</td>
<td>Alstom</td>
<td>Relays</td>
<td>AAAA</td>
</tr>
<tr data-state="exploits">
<td>Argus Messenger</td>
<td>Argus</td>
<td>Messenger</td>
<td>ArgusAdmin:masterkey</td>
</tr>
<tr data-state="exploits">
<td>Argus Address Manager</td>
<td>Argus</td>
<td>Address Manager Software</td>
<td>argus:argus</td>
</tr>
<tr data-state="exploits">
<td>ASTUTE140 Meter</td>
<td>Astute Medical</td>
<td>Analyzer</td>
<td>1234:1234</td>
</tr>
<tr data-state="exploits">
<td>CR10 v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>Conel 4.0.1</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>SPECTRE Router</td>
<td>B&amp;B ELECTRONICS</td>
<td>Router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>ER75i</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>ER 75i DUO</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>ER 75i SL</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>ER75i v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>LR77 v2 Libratum/LR77 v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>UR5i v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>UCR11-v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>UCR11 v2 SL</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>XR5i v2E</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>XR5i v2</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>XR5i</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>XR5i SL</td>
<td>B&amp;B ELECTRONICS</td>
<td>Industrial router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>ES1A</td>
<td>B&amp;B ELECTRONICS</td>
<td>Converter</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Vlinx VESR4x4</td>
<td>B&amp;B ELECTRONICS</td>
<td>SERIAL SERVER</td>
<td>
<blank>
</blank></td>
</tr>
<tr data-state="exploits">
<td>Vlinx MESR9xx Modbus Gateway</td>
<td>B&amp;B ELECTRONICS</td>
<td>Modbus Gateway</td>
<td>
<blank>
</blank></td>
</tr>
<tr data-state="exploits">
<td>MediCal QAWeb Agent</td>
<td>Barco</td>
<td>Client Application</td>
<td>Advanced:advanced</td>
</tr>
<tr data-state="exploits">
<td>IPC@CHIP</td>
<td>Beck IPC</td>
<td>PLC</td>
<td>PPPSERVER:, ppps:ppps</td>
</tr>
<tr data-state="exploits">
<td>CX5020</td>
<td>Beckhoff Automation GmbH</td>
<td>PLC</td>
<td>webguest:1</td>
</tr>
<tr data-state="exploits">
<td>TwinCAT</td>
<td>Beckhoff Automation GmbH</td>
<td>Software for the Windows control and automation technology</td>
<td>Administrator:1</td>
</tr>
<tr data-state="exploits">
<td>BinTec X1200 II</td>
<td>BinTec Elmeg</td>
<td>Router</td>
<td>admin:bintec,</td>
</tr>
<tr data-state="exploits">
<td>any routers</td>
<td>BinTec Elmeg</td>
<td>Router</td>
<td>(##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin</td>
</tr>
<tr data-state="exploits">
<td>BinTec R230aw</td>
<td>BinTec Elmeg</td>
<td>Router</td>
<td>admin:funkwerk</td>
</tr>
<tr data-state="exploits">
<td>Bintec W2002T-n</td>
<td>BinTec Elmeg</td>
<td>WLAN Access Point for applications in rolling stocks</td>
<td>admin:funkwerk, admin:admin</td>
</tr>
<tr data-state="exploits">
<td>bk3000</td>
<td>BK Ultrasound</td>
<td>Ultrasound System</td>
<td>administrator:superuser</td>
</tr>
<tr data-state="exploits">
<td>easy/easy compact/easy split</td>
<td>CAREL</td>
<td>Electronic Microprocessor Controllers, plug-in electronic digital thermostat</td>
<td>22 (access to the parameters)</td>
</tr>
<tr data-state="exploits">
<td>PJ32V/PJ32W/PJ32Z</td>
<td>CAREL</td>
<td>Electronic Microprocessor Controllers, plug-in electronic digital thermostat</td>
<td>22 (access to the parameters)</td>
</tr>
<tr data-state="exploits">
<td>pCOWeb</td>
<td>CAREL</td>
<td>Communication Card</td>
<td>root:froot, carel:fcarel, guest:fguest, httpadmin:fhttpadmin (ftp), admin:fadmin (http), passwordless accounts via telnet: http::48:48:HTTP users:/usr/http/root:/bin/bash, nobody::99:99:nobody:/var/lib/nobody:/bin/bash</td>
</tr>
<tr data-state="exploits">
<td>ir33 (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>ir33 power (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>ir33 DIN (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>powercompact (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>powercompact small (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>mastercella (ir33 platform)</td>
<td>CAREL</td>
<td>Integrated Electronic Microprocessor Controllers with LED display</td>
<td>22 (access to the parameters), 66 (download activation password)</td>
</tr>
<tr data-state="exploits">
<td>Universal Infrared Series</td>
<td>CAREL</td>
<td>Pressure, Humidity and Temperature controllers</td>
<td>22 (enter and modify parameters C0, C13, 15 and 16 in addition to all ???P??? parameters), 77 (enter and modify all parameters)</td>
</tr>
<tr data-state="exploits">
<td>IR33-DN33 Universale series</td>
<td>CAREL</td>
<td>Pressure, Humidity and Temperature controllers</td>
<td>77 (Setting type c, d, F parameters)</td>
</tr>
<tr data-state="exploits">
<td>pRack PR100</td>
<td>CAREL</td>
<td>Compressor Rack Controller</td>
<td>user password: 0000, service password: 1234, manufacturer password: 1234</td>
</tr>
<tr data-state="exploits">
<td>humiSteam x-plus</td>
<td>CAREL</td>
<td>Humidifiers</td>
<td>77</td>
</tr>
<tr data-state="exploits">
<td>PlantVisorPRO Locale</td>
<td>CAREL</td>
<td>Plant supervision</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>PlantWatchPRO</td>
<td>CAREL</td>
<td>Supervisor for small-medium installations</td>
<td>PVRemote:PD35010 (from a remote PC via a telephone connection)</td>
</tr>
<tr data-state="exploits">
<td>mC2SE</td>
<td>CAREL</td>
<td>Electronic Controller</td>
<td>Direct level:
<blank>, user level: 22, super user level: 11, factory level: 66</blank></td>
</tr>
<tr data-state="exploits">
<td>PowerSoft</td>
<td>Carlo Gavazzi</td>
<td>Modular Software</td>
<td>admin:admin, user:user</td>
</tr>
<tr data-state="exploits">
<td>In-Row M52 Microprocessor</td>
<td>ClimateWorx International</td>
<td>Controller</td>
<td>1024 (Service level)</td>
</tr>
<tr data-state="exploits">
<td>M52 Microprocessor</td>
<td>ClimateWorx International</td>
<td>Controller</td>
<td>Level 1: 1024, level 2: 4321, level 3: 1234</td>
</tr>
<tr data-state="exploits">
<td>ClinicPro EMR</td>
<td>ClinicPro</td>
<td>Electronic Medical / Health Records Software</td>
<td>admin:abc123</td>
</tr>
<tr data-state="exploits">
<td>E-Series EEG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)</td>
<td>Compumedics</td>
<td>Electroencephalograph Systems,data acquisition systems, HMI software</td>
<td>0000 (security dialogue password)</td>
</tr>
<tr data-state="exploits">
<td>E-Series EEG/PSG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)</td>
<td>Compumedics</td>
<td>Electroencephalograph Systems,data acquisition systems, HMI software</td>
<td>0000 (security dialogue password)</td>
</tr>
<tr data-state="exploits">
<td>BASRT-B</td>
<td>Contemporary Control Systems</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>UR5i</td>
<td>Datasensor</td>
<td>Router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>UR5i SL</td>
<td>Datasensor</td>
<td>Router</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>S/5 Light Monitor</td>
<td>Datex-Ohmeda</td>
<td>Portable vital signs monitor</td>
<td>16/04/1934</td>
</tr>
<tr data-state="exploits">
<td>AWC 500</td>
<td>Deif</td>
<td>Advanced Wind turbine Controller</td>
<td>root:deif7800 (administrator), default:1234 (user)</td>
</tr>
<tr data-state="exploits">
<td>Delta Industrial Automation DOPSoft</td>
<td>Delta Electronics</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Delta Industrial Automation Screen Editor</td>
<td>Delta Electronics</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>DC-ME-01T-S</td>
<td>Digi</td>
<td>Networking Modules</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect SP</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect Wi-SP</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect ME</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect ME 4 MB</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect Wi-ME</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect EM</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect Wi-EM</td>
<td>Digi</td>
<td>Network Device Server Module</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect ES 4/8 SB with Switch</td>
<td>Digi</td>
<td>Concentrator</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect ES 4/8 SB</td>
<td>Digi</td>
<td>Concentrator</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS 4x4</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS 4x2</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS W</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS 8</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS 8 MEI</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>ConnectPort TS 16</td>
<td>Digi</td>
<td>Terminal Server</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN GPRS</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN GSM-R</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN VPN</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN IA</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN 3G</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN 3G IA</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi Connect WAN 4G</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>Digi TransPort WR21</td>
<td>Digi</td>
<td>Industrial router</td>
<td>username:password</td>
</tr>
<tr data-state="exploits">
<td>Digi TransPort WR44</td>
<td>Digi</td>
<td>Industrial router</td>
<td>username:password</td>
</tr>
<tr data-state="exploits">
<td>Digi CM</td>
<td>Digi</td>
<td>Industrial router</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>DigiOne IAP Serial</td>
<td>Digi</td>
<td>Gateway</td>
<td>root:dbps</td>
</tr>
<tr data-state="exploits">
<td>i.LON SmartServer</td>
<td>Echelon</td>
<td>Programmable Modules</td>
<td>for ftp and lns servers: ilon:ilon</td>
</tr>
<tr data-state="exploits">
<td>i.LON SmartServer</td>
<td>Echelon</td>
<td>Building Energy Management Solution, LonWorks/IP Server, Internet Server</td>
<td>ilon:ilon</td>
</tr>
<tr data-state="exploits">
<td>i.LON SmartServer 2.0</td>
<td>Echelon</td>
<td>Building Energy Management Solution, LonWorks/IP Server, Internet Server</td>
<td>ilon:ilon</td>
</tr>
<tr data-state="exploits">
<td>i.LON 600</td>
<td>Echelon</td>
<td>Building Energy Management Solution, LonWorks/IP Server, Internet Server</td>
<td>ilon:ilon</td>
</tr>
<tr data-state="exploits">
<td>i.LON 100e4</td>
<td>Echelon</td>
<td>Building Energy Management Solution, LonWorks/IP Server, Internet Server</td>
<td>ilon:ilon</td>
</tr>
<tr data-state="exploits">
<td>LumInsight</td>
<td>Echelon</td>
<td>Central Management System</td>
<td>Echelon:echeloncorp</td>
</tr>
<tr data-state="exploits">
<td>Nexus 1500</td>
<td>Electro Industries/GaugeTech</td>
<td>Power Quality Meter</td>
<td>anonymous:anonymous</td>
</tr>
<tr data-state="exploits">
<td>Nexus 1500+</td>
<td>Electro Industries/GaugeTech</td>
<td>Power Quality Meter</td>
<td>anonymous:anonymous</td>
</tr>
<tr data-state="exploits">
<td>Communicator EXT 3.0</td>
<td>Electro Industries/GaugeTech</td>
<td>Power Monitoring Software</td>
<td>eignet:inp100</td>
</tr>
<tr data-state="exploits">
<td>AMS Suit</td>
<td>Emerson</td>
<td>diagnostic software</td>
<td>admin:
<blank>, sa:42Emerson42Eme (SQL Server)</blank></td>
</tr>
<tr data-state="exploits">
<td>DeltaV Digital Automation System</td>
<td>Emerson</td>
<td>Automation System</td>
<td>Administrator:deltav</td>
</tr>
<tr data-state="exploits">
<td>Liebert IntelliSlot Web Card</td>
<td>Emerson</td>
<td>Web Card</td>
<td>Liebert:Liebert, User:User</td>
</tr>
<tr data-state="exploits">
<td>Liebert OpenComms Web Card</td>
<td>Emerson</td>
<td>Web Card</td>
<td>Liebert:Liebert</td>
</tr>
<tr data-state="exploits">
<td>Smart Wireless Gateway 1420</td>
<td>Emerson</td>
<td>Wireless Gateway</td>
<td>admin:default, maint:default, oper:default, exec:default</td>
</tr>
<tr data-state="exploits">
<td>Smart Wireless Navigator</td>
<td>Emerson</td>
<td>stand-alone network infrastructure management tool</td>
<td>for the Windows log in Administrator:navigator, for Smart Wireless Navigator log in Supervisor:Admin, User1:Password1, User2:Password2, User3:Password3</td>
</tr>
<tr data-state="exploits">
<td>Network Power MPH2 Rack PDU</td>
<td>Emerson</td>
<td>Rack PDUs</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>UL33 UPS</td>
<td>Emerson</td>
<td>UPS</td>
<td>123456</td>
</tr>
<tr data-state="exploits">
<td>Control Link Refrigeration System Controller</td>
<td>Emerson</td>
<td>Controller</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>UltraSite</td>
<td>Emerson</td>
<td>Software</td>
<td>User 01:100, User 05:200, User 09:300, Engineer:400</td>
</tr>
<tr data-state="exploits">
<td>Avocent ACS 6000 Advanced Console Server</td>
<td>Emerson</td>
<td>Console Server</td>
<td>admin:avocent, root:linux</td>
</tr>
<tr data-state="exploits">
<td>ROCLINK 800</td>
<td>Emerson</td>
<td>Software</td>
<td>LOI:1000</td>
</tr>
<tr data-state="exploits">
<td>ControlWave Micro Quick</td>
<td>Emerson</td>
<td>PLC</td>
<td>for download project:, SYSTEM:666666</td>
</tr>
<tr data-state="exploits">
<td>IP-KVM Avocent MergePoint Unity</td>
<td>Emerson</td>
<td>Switch</td>
<td>Admin:blank</td>
</tr>
<tr data-state="exploits">
<td>Ovation DCS</td>
<td>Emerson</td>
<td>Switch for Distributed Control System</td>
<td>wdpf</td>
</tr>
<tr data-state="exploits">
<td>Ovation DCS</td>
<td>Emerson</td>
<td>Switch for Distributed Control System</td>
<td>SNMP community string: wdpfRO</td>
</tr>
<tr data-state="exploits">
<td>ControlWave Micro Process Automation Controller</td>
<td>Emerson</td>
<td>PLC</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Fieldgate FXA520</td>
<td>Endress+Hauser</td>
<td>Gateway for remote monitoring and diagnosis</td>
<td>super:super</td>
</tr>
<tr data-state="exploits">
<td>Fieldgate Viewer</td>
<td>Endress+Hauser</td>
<td>HMI software</td>
<td>admin:0000</td>
</tr>
<tr data-state="exploits">
<td>EMG-10</td>
<td>ENTES</td>
<td>MODBUS Gateway</td>
<td>emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)</td>
</tr>
<tr data-state="exploits">
<td>EMG-02</td>
<td>ENTES</td>
<td>MODBUS Gateway</td>
<td>emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)</td>
</tr>
<tr data-state="exploits">
<td>EMG-12</td>
<td>ENTES</td>
<td>MODBUS Gateway</td>
<td>emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)</td>
</tr>
<tr data-state="exploits">
<td>DTR-10</td>
<td>ENTES</td>
<td>time relay</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>MCB-125</td>
<td>ENTES</td>
<td>time relay</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>MCB-126</td>
<td>ENTES</td>
<td>time relay</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>MPR-53CS</td>
<td>ENTES</td>
<td>network analyzer</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>GEM-05</td>
<td>ENTES</td>
<td>GPRS/Modbus Gateway</td>
<td>gem10</td>
</tr>
<tr data-state="exploits">
<td>GEM-10</td>
<td>ENTES</td>
<td>GPRS/Modbus Gateway</td>
<td>gem10</td>
</tr>
<tr data-state="exploits">
<td>GEM-10SH</td>
<td>ENTES</td>
<td>GPRS/Modbus Gateway</td>
<td>gem10</td>
</tr>
<tr data-state="exploits">
<td>ENTBUS PLUS</td>
<td>ENTES</td>
<td>Energy Management Software</td>
<td>admin:1234</td>
</tr>
<tr data-state="exploits">
<td>EPM-04/04C/04CS</td>
<td>ENTES</td>
<td>MULTIMETER</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>MPR-SW</td>
<td>ENTES</td>
<td>Monitoring &amp; Reporting Software</td>
<td>admin:
<blank>
</blank></td>
</tr>
<tr data-state="exploits">
<td>All</td>
<td>eWON</td>
<td>Router</td>
<td>adm:adm</td>
</tr>
<tr data-state="exploits">
<td>USHA</td>
<td>Falcon</td>
<td>UPS SNMP HTTP AGENT</td>
<td>USHA:admin</td>
</tr>
<tr data-state="exploits">
<td>V-Server VPR</td>
<td>Fuji Electric</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>D60 Line Distance Relay</td>
<td>GE</td>
<td>RTU</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Sentinel License Manager</td>
<td>Gemalto</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>SymDec 4</td>
<td>General Electric</td>
<td>Video Streaming Recorder</td>
<td>Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)</td>
</tr>
<tr data-state="exploits">
<td>WebServer</td>
<td>General Electric</td>
<td>Video Streaming Recorder</td>
<td>Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)</td>
</tr>
<tr data-state="exploits">
<td>SymNav</td>
<td>General Electric</td>
<td>Video Streaming Recorder</td>
<td>Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)</td>
</tr>
<tr data-state="exploits">
<td>Cimplicity</td>
<td>General Electric</td>
<td>Video Streaming Recorder</td>
<td>Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)</td>
</tr>
<tr data-state="exploits">
<td>CIMPLICITY WebView</td>
<td>General Electric</td>
<td>Video Streaming Recorder</td>
<td>Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)</td>
</tr>
<tr data-state="exploits">
<td>SNMP/Web Interface</td>
<td>General Electric Digital Energy</td>
<td>SNMP/Web Interface</td>
<td>GE:GE (Telnet, HTTP), public (SNMP community string)</td>
</tr>
<tr data-state="exploits">
<td>FASTlab Synthesizer</td>
<td>General Electric Healthcare</td>
<td>Synthesizer</td>
<td>Admin:admin</td>
</tr>
<tr data-state="exploits">
<td>TRACERlab FX2 devices (model C, MeI and N)</td>
<td>General Electric Healthcare</td>
<td>Synthesis module</td>
<td>admin:tracerlab (physical access required)</td>
</tr>
<tr data-state="exploits">
<td>TRACERlab FX2 M</td>
<td>General Electric Healthcare</td>
<td>Chemistry Synthesizer</td>
<td>tracerlab:tracerlab (for remote access), admin:tracerlab</td>
</tr>
<tr data-state="exploits">
<td>HiSpeed CT/i</td>
<td>General Electric Healthcare</td>
<td>Computed Tomography Scanner</td>
<td>root:#bigguy, ctuser:4$apps</td>
</tr>
<tr data-state="exploits">
<td>Lightspeed QX/i</td>
<td>General Electric Healthcare</td>
<td>Computed Tomography Scanner</td>
<td>root:#bigguy, ctuser:4$apps</td>
</tr>
<tr data-state="exploits">
<td>Discovery CT590 RT</td>
<td>General Electric Healthcare</td>
<td>Computed Tomography Scanner</td>
<td>root:#bigguy</td>
</tr>
<tr data-state="exploits">
<td>Optima CT580</td>
<td>General Electric Healthcare</td>
<td>Computed Tomography Scanner</td>
<td>root:#bigguy</td>
</tr>
<tr data-state="exploits">
<td>Datex-Ohmeda Engstrm Ventilator</td>
<td>General Electric Healthcare</td>
<td>Carestation Ventilators</td>
<td>23-17-21 (Super User), 34-22-14 (service-level)</td>
</tr>
<tr data-state="exploits">
<td>IC695PNC001</td>
<td>General Electric Intelligent Platforms</td>
<td>PROFINET Controller</td>
<td>admin:system</td>
</tr>
<tr data-state="exploits">
<td>IC695ECM850</td>
<td>General Electric Intelligent Platforms</td>
<td>IEC 61850 Client</td>
<td>admin:system</td>
</tr>
<tr data-state="exploits">
<td>IC695ETM001</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC695CPE305</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC695CPE310</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC695CPE330</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698ETM001</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE010</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE020</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CRE020</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE030</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE040</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CRE030</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CRE040</td>
<td>General Electric Intelligent Platforms</td>
<td>Ethernet module/programmable controller</td>
<td>system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE030</td>
<td>General Electric Intelligent Platforms</td>
<td>Programmable controller with built-in web server</td>
<td>user:system</td>
</tr>
<tr data-state="exploits">
<td>IC698CPE040</td>
<td>General Electric Intelligent Platforms</td>
<td>Programmable controller with built-in web server</td>
<td>user:system</td>
</tr>
<tr data-state="exploits">
<td>IC698CRE030</td>
<td>General Electric Intelligent Platforms</td>
<td>Programmable controller with built-in web server</td>
<td>user:system</td>
</tr>
<tr data-state="exploits">
<td>IC698CRE040</td>
<td>General Electric Intelligent Platforms</td>
<td>Programmable controller with built-in web server</td>
<td>user:system</td>
</tr>
<tr data-state="exploits">
<td>SOS iOS Client</td>
<td>General Motors (GM), Shanghai OnStar (SOS)</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Reliance SCADA</td>
<td>Geovap</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Netmonitor</td>
<td>Heatmiser</td>
<td>gateway between the outside world and heating system</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NETLink PRO HW 1-1a-1 and FW 1. 54 and higher</td>
<td>Helmholz Systeme</td>
<td>Ethernet Gateway for MPI/PROFIBUS</td>
<td>NETLink PRO PoE:admin</td>
</tr>
<tr data-state="exploits">
<td>RS20</td>
<td>Hirschmann</td>
<td>Switch</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>RS30</td>
<td>Hirschmann</td>
<td>Switch</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MICE</td>
<td>Hirschmann</td>
<td>Switch</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>RSP 20</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>RSP 25</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>RSP 30</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>RSP 35</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH 4000 Family</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH 1000 Family</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH 100 Family</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH 4002 Family</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH104 Family Full Gigabit</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>MACH 1040 Family Full Gigabit</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>OCTOPUS 8M</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>OCTOPUS 16M</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>OCTOPUS 24M</td>
<td>Hirschmann</td>
<td>Industrial router</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>EAGLE 20</td>
<td>Hirschmann</td>
<td>Industrial ETHERNET Firewall</td>
<td>admin:private, user:public</td>
</tr>
<tr data-state="exploits">
<td>Classic Platform Switches</td>
<td>Hirschmann Automation and Control GmbH, a division of Belden Inc.</td>
<td>Network</td>
<td>user:public, admin:private</td>
</tr>
<tr data-state="exploits">
<td>EUB-550</td>
<td>Hitachi</td>
<td>Ultrasound Diagnostic Scanner</td>
<td>Service Tools:SERVICETOOL</td>
</tr>
<tr data-state="exploits">
<td>Web Controller</td>
<td>Hitachi</td>
<td>Controller</td>
<td>admin:1111</td>
</tr>
<tr data-state="exploits">
<td>LK SERIES PLC</td>
<td>HollySys Automation Technologies</td>
<td>PLC</td>
<td>FTP blank, Telnet blank</td>
</tr>
<tr data-state="exploits">
<td>Honeywell XL</td>
<td>Honeywell</td>
<td>Controller</td>
<td>Guest:guest, SysAdmin:honey</td>
</tr>
<tr data-state="exploits">
<td>Alerton BCM-WEB</td>
<td>Honeywell</td>
<td>BACtalk control module, Web server and Configurator CD</td>
<td>pass</td>
</tr>
<tr data-state="exploits">
<td>NetAXS</td>
<td>Honeywell</td>
<td>Access Control Unit</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>PIKO-Inverter 3.0, 3.6, 4.2, 5.5, 7.0, 8.3, 10.1</td>
<td>Kostal Solar</td>
<td>solar inverter, storage system</td>
<td>pvserver:pvwr</td>
</tr>
<tr data-state="exploits">
<td>PIKO BA Storage System</td>
<td>Kostal Solar</td>
<td>solar inverter, storage system</td>
<td>pvserver:pvwr</td>
</tr>
<tr data-state="exploits">
<td>EDS-MD 4</td>
<td>Lantronix</td>
<td>Medical Device Server</td>
<td>admin:PASS</td>
</tr>
<tr data-state="exploits">
<td>EDS-MD 8</td>
<td>Lantronix</td>
<td>Medical Device Server</td>
<td>admin:PASS</td>
</tr>
<tr data-state="exploits">
<td>EDS-MD 16</td>
<td>Lantronix</td>
<td>Medical Device Server</td>
<td>admin:PASS</td>
</tr>
<tr data-state="exploits">
<td>L-DALI DALI Light Controller</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>L-INX Automation Server</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>L-GATE Universal Gateway</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>L-IP CEA-709/IP Router</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>L-VIS</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LIOB-10x I/O Module</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LIOB-x5x I/O Module</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LIP-ME20X L-IP BACnet Router</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LWEB-802 Building Management System</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LWEB-803 Building Management System</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>LWEB-900 Building Management System</td>
<td>LOYTEC Electronics</td>
<td>Multiple Devices</td>
<td>admin:loytec4u</td>
</tr>
<tr data-state="exploits">
<td>L-Proxy CEA-709 Gateway</td>
<td>LOYTEC Electronics</td>
<td>Gateway</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NetBeacon Element Management Software</td>
<td>Metrobility</td>
<td>HMI Software</td>
<td>guest:guest, admin:admin, root:root</td>
</tr>
<tr data-state="exploits">
<td>PLC QnUCPU QnUDVCPU</td>
<td>Mitsubishi</td>
<td>PLC</td>
<td>MELSEC:MELSEC</td>
</tr>
<tr data-state="exploits">
<td>PLC QnUCPU QnUDE(H)CPU</td>
<td>Mitsubishi</td>
<td>PLC</td>
<td>QNUDECPU:QNUDECPU</td>
</tr>
<tr data-state="exploits">
<td>MES3-255C-EN</td>
<td>Mitsubishi</td>
<td>Web server</td>
<td>ecoV:ecopass, guest:user</td>
</tr>
<tr data-state="exploits">
<td>AirWorks AWK-3131-RCC</td>
<td>Moxa</td>
<td>Industrial 802.11n wireless AP/bridge/client</td>
<td>admin:root</td>
</tr>
<tr data-state="exploits">
<td>Railway Remote I/O (ioLogik E12xx)</td>
<td>Moxa</td>
<td>Remote Ethernet I/O</td>
<td>HTTP on Port 9020: 1)none:root, 2)none:none</td>
</tr>
<tr data-state="exploits">
<td>Railway Remote I/O (ioLogik E15xx)</td>
<td>Moxa</td>
<td>Remote Ethernet I/O</td>
<td>HTTP on Port 9020: 1)none:root, 2)none:none</td>
</tr>
<tr data-state="exploits">
<td>Cellular Micro RTU Controller (ioLogik W53xx, ioLogik)</td>
<td>Moxa</td>
<td>micro RTU controller</td>
<td>administrator:blank, Telnet on port 9900 / 9000: root:root</td>
</tr>
<tr data-state="exploits">
<td>VPort 461 Industrial Video Encoder</td>
<td>Moxa</td>
<td>Industrial Video Encoder</td>
<td>admin:admin,
<none>:
<none>
</none></none></td>
</tr>
<tr data-state="exploits">
<td>IA240 Embedded computer</td>
<td>Moxa</td>
<td>Embedded computers are designed for industrial, automation applications</td>
<td>telnet root:root, FTP root:blank, PPP root:root, serial console root:root</td>
</tr>
<tr data-state="exploits">
<td>IA241 Embedded computer</td>
<td>Moxa</td>
<td>Embedded computers are designed for industrial, automation applications</td>
<td>telnet root:root, FTP root:blank, PPP root:root, serial console root:root</td>
</tr>
<tr data-state="exploits">
<td>OnCell Central Manager</td>
<td>Moxa</td>
<td>Software</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>EDS-505A Series</td>
<td>Moxa</td>
<td>Switch</td>
<td>admin:
<none>
</none></td>
</tr>
<tr data-state="exploits">
<td>EDS-508A Series</td>
<td>Moxa</td>
<td>Switch</td>
<td>admin:
<none>
</none></td>
</tr>
<tr data-state="exploits">
<td>OnCell G3100 Series</td>
<td>Moxa</td>
<td>Cellular IP Gateways</td>
<td>HTTP admin:admin, HTTP Admin:Keep
<blank>, PAP admin:
<blank>
</blank></blank></td>
</tr>
<tr data-state="exploits">
<td>MXview</td>
<td>Moxa</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PCS-9611</td>
<td>Nari</td>
<td>PLC</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>3G21WB (BigPond Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>3G9WB (BigPond Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>N3G001W (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB14WN (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB5 (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB5Plus4 (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB6Plus4 (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB6Plus4W (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NNB7 (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB9WMAXX (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NP804N (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>NB1300 Plus 4 (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>NP803N (Netcomm Firmware)</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>4G LTE Light Industrial M2M Router</td>
<td>Netcomm Wireless</td>
<td>Router</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>Linear eMerge E3 Series</td>
<td>Nortek</td>
<td>Access Control</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>SuperView</td>
<td>NOVUS AUTOMATION</td>
<td>SCADA</td>
<td>superview:superview</td>
</tr>
<tr data-state="exploits">
<td>AirGate-3G</td>
<td>NOVUS Automation</td>
<td>Dual SIM Industrial Cellular VPN Router</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>N1040</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N480D</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N960</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N1020</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N1040i</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N1540</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N2000</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N3000</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>N120</td>
<td>NOVUS Automation</td>
<td>Temperature Controller</td>
<td>1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)</td>
</tr>
<tr data-state="exploits">
<td>Dragon Medical 360 Network Edition</td>
<td>Nuance</td>
<td>Medical Speech Recognition Software Solutions</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>NS-Series Programmable Terminals Web Interface (NS12-TS01-V2, NS10-TV01-V2, NS8-TV01-V2, NS5-SQ11-V2, NS5-TQ11-V2 and NS5-MQ11-V2)</td>
<td>Omron</td>
<td>Programmable Terminals</td>
<td>default:default</td>
</tr>
<tr data-state="exploits">
<td>CX-Supervisor</td>
<td>Omron</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>CX-One</td>
<td>Omron</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>CJ1M CPU Units with Ethernet Functions</td>
<td>Omron IA</td>
<td>PLC</td>
<td>for http: ETHERNET, for ftp: CONFIDENTIAL</td>
</tr>
<tr data-state="exploits">
<td>PI Vision</td>
<td>OSIsoft</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PI Data Archive</td>
<td>OSIsoft</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>EH-net server</td>
<td>Ouman</td>
<td>HMI Software</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>WLAN capable devices using the WPA2 Protocol</td>
<td>PEPPERL+FUCHS/ecom instruments</td>
<td>Network</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>JouleTemp</td>
<td>Phasefale Controls</td>
<td>PLC</td>
<td>admin:pass</td>
</tr>
<tr data-state="exploits">
<td>Logic+</td>
<td>PHOENIX CONTACT</td>
<td>Software</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>FL SWITCH</td>
<td>PHOENIX CONTACT</td>
<td>Network</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>FL COMSERVER</td>
<td>PHOENIX CONTACT</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>AUTOPLATE</td>
<td>PIPS Technology</td>
<td>license plate recognition system</td>
<td>
<blank>(Telnet), wl_test:wl_test, vesstore:vesstore, ftp_boot:ftp_boot (FTP)</blank></td>
</tr>
<tr data-state="exploits">
<td>ICX30-HWC</td>
<td>Prosoft Technology</td>
<td>Industrial Cellular Gateway</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>FactoryTalk Alarms and Events</td>
<td>Rockwell Automation</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>1756-EN2TSC</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>EtherNet/IP communication module</td>
<td>Administrator:admin</td>
</tr>
<tr data-state="exploits">
<td>1734-AENT</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>I/O Adapter</td>
<td>admin:password</td>
</tr>
<tr data-state="exploits">
<td>1756-EWEB</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Web Server Module</td>
<td>Administrator:
<none>
</none></td>
</tr>
<tr data-state="exploits">
<td>1768-EWEB</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Web Server Module</td>
<td>Administrator:
<none>
</none></td>
</tr>
<tr data-state="exploits">
<td>9300-RADES</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Industrial Modem</td>
<td>HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM, CHAP/PAP: ppp_user:ZYPCOM</td>
</tr>
<tr data-state="exploits">
<td>9300-8EDM</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Industrial Switch</td>
<td>HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM</td>
</tr>
<tr data-state="exploits">
<td>MicroLogix 1100 Embedded Web Server</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Web Server</td>
<td>guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)</td>
</tr>
<tr data-state="exploits">
<td>MicroLogix 1400 Embedded Web Server</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>Web Server</td>
<td>guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)</td>
</tr>
<tr data-state="exploits">
<td>PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/, PVPlus 6</td>
<td>Rockwell Automation / Allen-Bradley</td>
<td>SCADA</td>
<td>password</td>
</tr>
<tr data-state="exploits">
<td>TROVIS 5590 Web Module</td>
<td>SAMSON GROUP</td>
<td>Web Module</td>
<td>To read data 1111:1111, To change data 4444:4444</td>
</tr>
<tr data-state="exploits">
<td>Integrated Management System DMS</td>
<td>Samsung</td>
<td>Data Management Server</td>
<td>root:rkwjsdusrnth</td>
</tr>
<tr data-state="exploits">
<td>Integrated Management System S-NET mini</td>
<td>Samsung</td>
<td>S-NET IMS</td>
<td>DMS Connection: 0000 or 1234</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Series 800 Power Meter (PM800)</td>
<td>Schneider Electric</td>
<td>Power Monitoring Module</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Series 800 Power Meter (PM820SD)</td>
<td>Schneider Electric</td>
<td>Power Monitoring Module</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Series 800 Power Meter (PM870SD)</td>
<td>Schneider Electric</td>
<td>Power Monitoring Module</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Power Meter</td>
<td>Schneider Electric</td>
<td>Power Monitoring Module</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic ION7550 Energy and power meter</td>
<td>Schneider Electric</td>
<td>Energy and power meter</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic ION7650 Energy and power meter</td>
<td>Schneider Electric</td>
<td>Energy and power meter</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic ION8650 Energy and power meter</td>
<td>Schneider Electric</td>
<td>Energy and power meter</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Ethernet Gateway EGX100</td>
<td>Schneider Electric</td>
<td>Integrated gateway-server</td>
<td>Administrator:Gateway</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic Ethernet Gateway EGX300</td>
<td>Schneider Electric</td>
<td>Integrated gateway-server</td>
<td>Administrator:Gateway</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic EGX200 (with firmware version 5.5 or higher)</td>
<td>Schneider Electric</td>
<td>gateway-server</td>
<td>Administrator:admin, User 1:master, User 2:engineer, User 3:operator</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic EGX400 (with firmware version 5.5 or higher)</td>
<td>Schneider Electric</td>
<td>gateway-server</td>
<td>Administrator:admin, User 1:master, User 2:engineer, User 3:operator</td>
</tr>
<tr data-state="exploits">
<td>Modicon Quantum</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>ftpuser/password, qbf77101/hexakisoctahedron, USER:USER</td>
</tr>
<tr data-state="exploits">
<td>Modicon M340</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)</td>
</tr>
<tr data-state="exploits">
<td>Modicon M340 for Ethernet</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)</td>
</tr>
<tr data-state="exploits">
<td>Modicon Premium</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>FTP: sysdiag:factorycast@schneider, HTTP: USER:USER</td>
</tr>
<tr data-state="exploits">
<td>PowerLogic PM8000 Power Meter</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>Physical: 0, FTP: 8000:
<display password="">
</display></td>
</tr>
<tr data-state="exploits">
<td>PowerLogic PM8240 Power Meter</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>Physical: 0, FTP: 8000:
<display password="">
</display></td>
</tr>
<tr data-state="exploits">
<td>PowerLogic PM8243 Power Meter</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>Physical: 0, FTP: 8000:
<display password="">
</display></td>
</tr>
<tr data-state="exploits">
<td>PowerLogic PM8244 Power Meter</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>Physical: 0, FTP: 8000:
<display password="">
</display></td>
</tr>
<tr data-state="exploits">
<td>TSX ETG 1000</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>HTTP Server, PAP Protocol: USER:USER, FTP: wsupgrade:wsupgrade, Serial Connection: Administrator:Gateway</td>
</tr>
<tr data-state="exploits">
<td>ETG100</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>Administrator:Gateway</td>
</tr>
<tr data-state="exploits">
<td>M258</td>
<td>Schneider Electric</td>
<td>PLC</td>
<td>adm:adm</td>
</tr>
<tr data-state="exploits">
<td>Quantum NOE 771 xx</td>
<td>Schneider Electric</td>
<td>Ethernet Modules</td>
<td>pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS
(password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)</td>
</tr>
<tr data-state="exploits">
<td>CitectSCADA</td>
<td>Schneider Electric</td>
<td>Ethernet Modules</td>
<td>pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS
(password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)</td>
</tr>
<tr data-state="exploits">
<td>StruxureOn Gateway</td>
<td>Schneider Electric</td>
<td>Proxy Server</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Pelco VideoXpert Enterprise</td>
<td>Schneider Electric</td>
<td>Other</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Triconex Tricon, model 3008</td>
<td>Schneider Electric</td>
<td>Safety System</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Simatic S7-300 (pre-2009 versions)</td>
<td>Siemens</td>
<td>PLC</td>
<td>Hardcoded password: Basisk:Basisk</td>
</tr>
<tr data-state="exploits">
<td>Simatic S7-1200</td>
<td>Siemens</td>
<td>PLC</td>
<td>admin:blank</td>
</tr>
<tr data-state="exploits">
<td>Simatic S7-1500</td>
<td>Siemens</td>
<td>PLC</td>
<td>admin:blank</td>
</tr>
<tr data-state="exploits">
<td>Scalance X-200</td>
<td>Siemens</td>
<td>Industrial Ethernet Switches</td>
<td>admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)</td>
</tr>
<tr data-state="exploits">
<td>W788-1PRO</td>
<td>Siemens</td>
<td>Industrial Wireless LAN, Industrial Ethernet Switches</td>
<td>admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)</td>
</tr>
<tr data-state="exploits">
<td>W788-2PRO</td>
<td>Siemens</td>
<td>Industrial Wireless LAN, Industrial Ethernet Switches</td>
<td>admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)</td>
</tr>
<tr data-state="exploits">
<td>Synco living Web server OZW772 V2.0</td>
<td>Siemens</td>
<td>Web-server</td>
<td>Administrator:Password</td>
</tr>
<tr data-state="exploits">
<td>Siemens WinCC 7.x</td>
<td>Siemens</td>
<td>HMI Software</td>
<td>winccd:winccpass, wincce:winccpass, DMUser:Data&amp;Pass, Administrator:Administrator</td>
</tr>
<tr data-state="exploits">
<td>Ruggedcom RMC30</td>
<td>Siemens</td>
<td>Industrial router</td>
<td>admin:admin, operator:operator, guest:guest</td>
</tr>
<tr data-state="exploits">
<td>RUGGEDCOM ROX II for RX1500, RX1501, RX1510, RX1511, RX1512</td>
<td>Siemens</td>
<td>Ethernet Switches Layer 3 / Routers</td>
<td>root:admin (service), admin:admin (administrator), oper:oper (operator), guest:guest (guest)</td>
</tr>
<tr data-state="exploits">
<td>RuggedSwitch RS8000</td>
<td>Siemens</td>
<td>Industrial router</td>
<td>admin</td>
</tr>
<tr data-state="exploits">
<td>RuggedSwitch RS1600</td>
<td>Siemens</td>
<td>Industrial router</td>
<td>admin</td>
</tr>
<tr data-state="exploits">
<td>RuggedSwitch RS900</td>
<td>Siemens</td>
<td>Industrial router</td>
<td>admin</td>
</tr>
<tr data-state="exploits">
<td>Siemens ST950</td>
<td>Siemens</td>
<td>Intersection controller</td>
<td>root:zP2wxY4uE</td>
</tr>
<tr data-state="exploits">
<td>Siemens Climatix</td>
<td>Siemens</td>
<td>PLC</td>
<td>Level 6 End users: 1000 (Physical), Level 4 Service operator: 2000 (Physical), Level 2 OEM: 6000 (Physical), Web: ADMIN:SBTAdmin!</td>
</tr>
<tr data-state="exploits">
<td>Sicam SGU</td>
<td>Siemens</td>
<td>RTU</td>
<td>642935177</td>
</tr>
<tr data-state="exploits">
<td>Sicam SGU</td>
<td>Siemens</td>
<td>RTU</td>
<td>admin@root:charleM!800</td>
</tr>
<tr data-state="exploits">
<td>SC 7000</td>
<td>Siemens</td>
<td>Patient Monitors Service</td>
<td>4712 (passcode, physical access required)</td>
</tr>
<tr data-state="exploits">
<td>SC 9000XL</td>
<td>Siemens</td>
<td>Patient Monitors Service</td>
<td>4712 (passcode, physical access required)</td>
</tr>
<tr data-state="exploits">
<td>Industrial Products (Multiple)</td>
<td>Siemens</td>
<td>Multiple</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>TeleControl Server Basic</td>
<td>Siemens</td>
<td>RTU</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>SWT3000</td>
<td>Siemens</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>TIM 1531 IRC</td>
<td>Siemens</td>
<td>Software</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Building Technologies Products</td>
<td>Siemens</td>
<td>Other</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>AirLink</td>
<td>Sierra Wireless</td>
<td>3G/4G gateway</td>
<td>sconsole:12345</td>
</tr>
<tr data-state="exploits">
<td>AirLink</td>
<td>Sierra Wireless</td>
<td>3G/4G gateway</td>
<td>user:12345, viewer:12345</td>
</tr>
<tr data-state="exploits">
<td>eSolar</td>
<td>Sinapsi</td>
<td>Web-Server for photovoltaic applications</td>
<td>admin:admin</td>
</tr>
<tr data-state="exploits">
<td>Sunny WebBox</td>
<td>SMA Solar Technology</td>
<td>ICS device for data logging</td>
<td>Installer:sma</td>
</tr>
<tr data-state="exploits">
<td>Stulz WIB 8000</td>
<td>Stulz GmbH</td>
<td>PLC</td>
<td>Administrator, highest authorization: ganymed, Medium authorization: kallisto, Lowest authorization: europa</td>
</tr>
<tr data-state="exploits">
<td>TAC Xenta 500/700/911</td>
<td>TAC AB</td>
<td>PLC</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>TAC Xenta 913</td>
<td>TAC AB</td>
<td>PLC</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>TAC Xenta 511</td>
<td>TAC AB</td>
<td>PLC</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>TAC Xenta 527</td>
<td>TAC AB</td>
<td>PLC</td>
<td>root:root</td>
</tr>
<tr data-state="exploits">
<td>Tecomat Foxtrot</td>
<td>Tecomat</td>
<td>PLC</td>
<td>0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9)</td>
</tr>
<tr data-state="exploits">
<td>ATMS.now</td>
<td>Trafficware</td>
<td>Advanced Traffic Management System</td>
<td>naztec:naztec</td>
</tr>
<tr data-state="exploits">
<td>NiagaraAX (ver 1)</td>
<td>Tridium</td>
<td>Software for JACE-2, JACE-403 or JACE-545</td>
<td>tridium:niagara</td>
</tr>
<tr data-state="exploits">
<td>NiagaraAX (ver 2)</td>
<td>Tridium</td>
<td>Software for JACE-2, JACE-403 or JACE-545</td>
<td>tridium:niagara</td>
</tr>
<tr data-state="exploits">
<td>NiagaraAX (ver 3)</td>
<td>Tridium</td>
<td>Software for JACE-2, JACE-403 or JACE-545</td>
<td>tridium:niagara</td>
</tr>
<tr data-state="exploits">
<td>Niagara</td>
<td>Tridium</td>
<td>Software for JACE-2, JACE-403 or JACE-545</td>
<td>tridium:niagara</td>
</tr>
<tr data-state="exploits">
<td>BL20-E-GW-EN</td>
<td>Turck</td>
<td>PLC</td>
<td>HTTP: password, FTP: (unspecified hardcoded)</td>
</tr>
<tr data-state="exploits">
<td>BL67-E-GW-EN</td>
<td>Turck</td>
<td>PLC</td>
<td>HTTP: password, FTP: (unspecified hardcoded)</td>
</tr>
<tr data-state="exploits">
<td>AirControl</td>
<td>Ubiquiti</td>
<td>Web Management Application</td>
<td>ubnt:ubnt</td>
</tr>
<tr data-state="exploits">
<td>AirOS</td>
<td>Ubiquiti</td>
<td>operation system</td>
<td>ubnt:ubnt</td>
</tr>
<tr data-state="exploits">
<td>WAGO-I/O-SYSTEM??750</td>
<td>Wago</td>
<td>Controller</td>
<td>admin:wago, user:user, guest:guest</td>
</tr>
<tr data-state="exploits">
<td>WAGO-I/O-IPC 758-870/000-xxx</td>
<td>Wago</td>
<td>Compact Industrial PC?</td>
<td>http, ftp:, user:user00 , administrator:, su:ko2003wa</td>
</tr>
<tr data-state="exploits">
<td>Modular I/O-System Linux Fieldbus Coupler 750-860</td>
<td>Wago</td>
<td>PLC</td>
<td>root:wago , admin:wago, user:user , guest:guest</td>
</tr>
<tr data-state="exploits">
<td>PFC200 Series</td>
<td>WAGO</td>
<td>PLC</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>SoftCare Evo Type SE10</td>
<td>WashTec</td>
<td>Roll-over car wash system</td>
<td>00001 (limited access), 00000 (unlimited access)</td>
</tr>
<tr data-state="exploits">
<td>KingSCADA 3.0</td>
<td>Wellintech</td>
<td>Software</td>
<td>administrator:administrator (role KVAdministrator)</td>
</tr>
<tr data-state="exploits">
<td>TDW 33</td>
<td>Westermo</td>
<td>Industrial Modem</td>
<td>no password, just return, Hardcoded password: n3Y9kA6otYZu8, (?? TD-36)</td>
</tr>
<tr data-state="exploits">
<td>MRD-305-DIN</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-310</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-315</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-330</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-355</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-350</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>MRD-455</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>RedFox Series</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>Wolverine Series</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>Lynx Series</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>Falcon Series</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>Viper Series</td>
<td>Westermo</td>
<td>Industrial router</td>
<td>admin:westermo</td>
</tr>
<tr data-state="exploits">
<td>Intouch</td>
<td>Wonderware</td>
<td>SCADA</td>
<td>Administrator:Wonderware</td>
</tr>
<tr data-state="exploits">
<td>Historian</td>
<td>Wonderware</td>
<td>SQL Server</td>
<td>SQL Server Login: aadbo:pwddbo, wwdbo:pwddbo, aaAdmin:pwAdmin, wwAdmin:wwAdmin, aaPower:pwPower, wwPower:wwPower, aaUser:pwUser, wwUser:wwUser</td>
</tr>
<tr data-state="exploits">
<td>System Platform/Archestra</td>
<td>Wonderware</td>
<td>Integrated Development Environment</td>
<td>administrator:blank</td>
</tr>
<tr data-state="exploits">
<td>IP Cameras and DVRs</td>
<td>Xiongmai Technology</td>
<td>Other</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>442SR</td>
<td>Xzeres</td>
<td>small wind turbine</td>
<td>MyTurbine:m442+SRt</td>
</tr>
<tr data-state="exploits">
<td>YFGW410 gateway</td>
<td>Yokogawa</td>
<td>Wireless Management Station</td>
<td>admin:!admin</td>
</tr>
<tr data-state="exploits">
<td>DX1000</td>
<td>Yokogawa</td>
<td>Software</td>
<td>Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90</td>
</tr>
<tr data-state="exploits">
<td>DX1000N</td>
<td>Yokogawa</td>
<td>Software</td>
<td>Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90</td>
</tr>
<tr data-state="exploits">
<td>DX2000 Advanced</td>
<td>Yokogawa</td>
<td>Software</td>
<td>Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90</td>
</tr>
<tr data-state="exploits">
<td>CENTUM CS 3000 DCS</td>
<td>Yokogawa</td>
<td>Distributed Control System</td>
<td>CENTUM:CENTUM</td>
</tr>
<tr data-state="exploits">
<td>EJX910A Multivariable Transmitter HART Communication Type</td>
<td>Yokogawa</td>
<td>Multivariable transmitter</td>
<td>YOKOGAWA. (to release the Write Protect mode),</td>
</tr>
<tr data-state="exploits">
<td>WT 3000 Driver</td>
<td>Yokogawa</td>
<td>Precision Power Analyzer</td>
<td>anonymous:blank (Ethernet access)</td>
</tr>
<tr data-state="exploits">
<td>CENTUM series and Exaopc</td>
<td>Yokogawa</td>
<td>OPC</td>
<td>0</td>
</tr>
<tr data-state="exploits">
<td>Nightingale PPM3</td>
<td>Zoe Medical</td>
<td>Vital Sign Monitor With CO2</td>
<td>Set Dial 1 to 49, Set Dial 2 to 48, Set Dial 3 to 46</td>
</tr>
</tbody>
</table>
</div>