CVE-2018-12924

Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service

published June 28, 2018

CVSS
—
EPSS
1%
Percentile
73.3
In the wild
Unconfirmed
What it is

⚠️ Default password alert! The Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server ship with the password 'sollae' for TELNET — a sneaky gift that attackers could absolutely love! 🔍 Think of it like an office with a doorknob that anyone can twist because the lock was never changed after construction. Anyone who knows the secret code can waltz right in and poke around! If an attacker figures out this default password, they can gain unauthorized access to your device, potentially manipulating operations or sniffing sensitive information. It’s like handing over the keys to your data without even knowing it!

Put simply

Think of it like an office with a doorknob that anyone can twist because the lock was never changed after construction. Anyone who knows the secret code can waltz right in and poke around! This vulnerability arises because Sollae devices use a default TELNET password of 'sollae', enabling unauthorized users to connect and control the device without any additional authentication steps.

What to do

If an attacker figures out this default password, they can gain unauthorized access to your device, potentially manipulating operations or sniffing sensitive information. It’s like handing over the keys to your data without even knowing it! Change the default password immediately to something strong and unique! Also, consider disabling TELNET and using SSH for secure remote access. Regularly audit your devices for any other default credentials. You've got this! Take these steps to secure your devices and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01455 · 73.3th percentile
Published
2018-06-28T11:00Z
EPSS history
Timeline
  • 28 JUN 11:00Z
    Sollae Serial-Ethernet-Module and Remote-I/O-Device-Server devices have a default password of sollae for the TELNET service
    cvelistv5