CVE-2004-0311

American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which…

published March 18, 2004

CVSS
—
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

⚠️ Did you know some APC devices are still running on a default password that's as common as a sandwich order? That’s a recipe for disaster! Think of it like leaving your front door unlocked with a sign that says 'Welcome, help yourself!' A default password is just as inviting to an intruder as that sign is to a burglar. An attacker could easily waltz in and take control of your power management system, leading to unauthorized access to critical operations. They could manipulate settings, shut down systems, or even cause outages, which could be absolutely devastating for your operations.

Put simply

Think of it like leaving your front door unlocked with a sign that says 'Welcome, help yourself!' A default password is just as inviting to an intruder as that sign is to a burglar. This vulnerability arises because certain APC Web/SNMP Management SmartSlot Cards are shipped with a default password (TENmanUFactOryPOWER) that attackers can exploit to gain unauthorized access remotely.

What to do

An attacker could easily waltz in and take control of your power management system, leading to unauthorized access to critical operations. They could manipulate settings, shut down systems, or even cause outages, which could be absolutely devastating for your operations. To protect yourself, change the default password immediately to something unique and complex. Ensure that all devices are updated to the latest firmware version and regularly audit your security settings to prevent unauthorized access. You've got this! Just follow these steps and you'll secure your systems in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02470 · 84.4th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which…
    cvelistv5