By default, Siemens SIMATIC ProTool installs with a default password. The admin account has a password of "100" which is publicly known and documented. This allows attackers to trivially access the program or system and gain privileged access.
Classification
Location:
Local / Remote
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Solution:
Workaround
Exploit:
Exploit Public
Disclosure:
Vendor Verified
OSVDB:
SCADA
Solution
Immediately after installation, change all default installed accounts to use a unique and secure password. When possible, change default account names to custom names as well.
