ID: INFO-11

Title: Two accounts assigned superuser privileges

Severity: Informational

CVSS Score: -

CVSS Vector String: -

Description: Both the root and Admin accounts are assigned UID 0, granting both full superuser privileges. Having multiple superuser accounts unnecessarily expands the attack surface, as compromising either account grants complete control over the device. Additionally, the ap71 account is assigned UID 500 but GID 0, granting it root group membership, which may allow access to group-restricted resources.

Remediation: Only one superuser account (UID 0) should exist on the system. Remove or reconfigure the Admin account to use a non-zero UID with only the permissions required. Review and correct the GID assignment for the ap71 account.

More information: See System Hardening Analysis chapter.