CVE-2017-11351

Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account

published September 13, 2017

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

🚨 Default credentials alert! The Axesstel MU553S and MU55XS-V1.14 devices come out of the box with a shocking default password of 'admin' for the admin account. 🔥 Think of it like a hotel that leaves the front door wide open with a sign that says, 'Welcome! Just use the key labeled “admin”!' It’s a huge risk because anyone can walk right in without any effort. This means that anyone within network range could gain full control over the device. An attacker could easily change settings, access sensitive information, or even hijack your internet connection, leaving your network wide open to further exploitation.

Put simply

Think of it like a hotel that leaves the front door wide open with a sign that says, 'Welcome! Just use the key labeled “admin”!' It’s a huge risk because anyone can walk right in without any effort. The vulnerability exists due to hard-coded default credentials that aren't changed during setup, allowing unauthorized access to the admin interface of the devices.

What to do

This means that anyone within network range could gain full control over the device. An attacker could easily change settings, access sensitive information, or even hijack your internet connection, leaving your network wide open to further exploitation. To secure your devices, change the default password immediately to something strong and unique. Additionally, consider implementing a network access control policy to restrict who can connect to your devices in the future. You’ve got this! Change that password and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01405 · 72.4th percentile
Published
2017-09-13T08:00Z
EPSS history
Timeline
  • 13 SEP 08:00Z
    Axesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account
    cvelistv5