Default Password Vulnerability

A default password as set by the default distrubution of some software or application or device. This vulnerability is particularly dangerous as there are my publicly available lists of default passwords.

A possible remedy is installation-time password generation. For example when initial installation happens, the default password could be set to the current date. This would make the password significantly more difficult to guess.

• CIRT.net default passwords lists
• Password Cracking Attempt
• See web application security and security vulnerabilities catalog.