By default, Xtreme RAT Server installs with a default password. The program has a password of '0123456789' which is publicly known and documented. This allows attackers to trivially access the program or system and gain privileged access.

The presence of this software means the host system may have been compromised through some other exploit/vulnerability. If this software was not installed by the legitimate administrator, the only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system.

• Related OSVDB ID: 86828 86837 86838
• Other Advisory URL: http://matasano.com/research/PEST-CONTROL.pdf
• News Article: http://www.darkreading.com/threat-intelligence/167901121/security/vulnerabilities/240008942/popular-rats-found-riddled-with-bugs-weak-crypto.html
• Vendor URL: https://sites.google.com/site/nxtremerat/

• Shawn Denbow - Matasano Security
• Jesse Hertz - Matasano Security

NVD does not currently have a CVSSv2 score assigned.