ID: MEDIUM-06

Title: Web interface possesses weak default credentials

Severity: Medium

CVSS Score: 6.5

CVSS Vector String: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description: The web management interface ships with default credentials of admin/admin, which are printed on the device label. The interface does not prompt the user to change these credentials on first login, meaning a device left at factory defaults remains accessible to anyone who knows or guesses the default.

Remediation: Prompt the user to set a unique password during initial setup and prevent access to the management interface until this step is completed. Do not use identical credentials across multiple services.

More information: See Web Interface Analysis chapter.