Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

  1. Home
  2. Cisco Hard-codes Insecurity

Cisco Hard-codes Insecurity

No one said it was easy to develop enterprise-class software. Surely while testing something as complex as a centralized wireless management infrastructure, you've got to make some shortcuts for testing purposes. But to then leave those intact in the shipping...
April 09, 2004

No one said it was easy to develop enterprise-class software. Surely while testing something as complex as a centralized wireless management infrastructure, you've got to make some shortcuts for testing purposes. But to then leave those intact in the shipping product? Oh boy.

A default username/password pair is present in all releases of the Wireless LAN Solution Engine (WLSE) and Hosting Solution Engine (HSE) software. A user who logs in using this username has complete control of the device. This username cannot be disabled. There is no workaround.

Tags:

Commentary