CVE-2022-39989

An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the…

Critical · published April 26, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
56.2
In the wild
Unconfirmed
What it is

🚨 Default credentials still in play! The Fighting Cock Information System 1.0 ships with admin/admin but doesn’t prompt users to change them — like moving into a new house and leaving the previous owner's key under the mat! 🔥 Think of it as moving into a brand new office with the front door key still in the old tenant's name — any intruder can waltz in without a care, because nobody bothered to change the locks! Without a simple password change, an attacker can easily access sensitive information, make unauthorized changes, or even take complete control of the system. This could lead to data breaches, system outages, or worse, total exploitation of the information system. This is absolutely devastating if you’re caught off guard!

Put simply

Think of it as moving into a brand new office with the front door key still in the old tenant's name — any intruder can waltz in without a care, because nobody bothered to change the locks! This vulnerability allows anyone to log in with default credentials, as the system fails to force the administrator to change them upon installation. It's a glaring security hole that leaves the door wide open for unauthorized access.

What to do

Without a simple password change, an attacker can easily access sensitive information, make unauthorized changes, or even take complete control of the system. This could lead to data breaches, system outages, or worse, total exploitation of the information system. This is absolutely devastating if you’re caught off guard! Immediate action is required: Change the default credentials to something secure and unique. Additionally, implement a policy to ensure that new installations prompt users to create strong passwords. Regular audits of your security settings are essential! You've got this! Follow these steps and lock down your system today. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.2th percentile
Published
2023-04-26T00:00Z
EPSS history
Timeline
  • 26 APR 00:00Z
    An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administrators to change the…
    cvelistv5