Critical · published February 6, 2026
🚨 Just one network access and it’s game over! The application spins up an admin account with default credentials, handing over the keys to the kingdom! 🔥 Think of this as a hotel that automatically gives out master keys to anyone who checks in, without verifying their identity. If someone gets in, they can access any room, managing everything from guest services to security settings! An attacker with access to the login interface would have full admin control, allowing them to alter critical system settings or even manipulate VPN tunnels. This could lead to unauthorized access to sensitive data, potentially wreaking havoc on your network. It's a recipe for chaos!
Think of this as a hotel that automatically gives out master keys to anyone who checks in, without verifying their identity. If someone gets in, they can access any room, managing everything from guest services to security settings! In versions 2.0.1 and earlier, 3DP-MANAGER creates an administrative account upon initialization using the default credentials 'admin/admin'. This flaw allows anyone with network access to assume administrative control, bypassing any legitimate login procedures.
An attacker with access to the login interface would have full admin control, allowing them to alter critical system settings or even manipulate VPN tunnels. This could lead to unauthorized access to sensitive data, potentially wreaking havoc on your network. It's a recipe for chaos! Update to version 2.0.2 immediately to patch this vulnerability. Ensure that administrative accounts are configured manually with strong, unique passwords during initialization. Additionally, consider restricting network access to the application's login interface to trusted IPs only. This is fixable! Follow these steps and you’ll have your system locked down in no time. 🛡️