A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission)

A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission)

Multiple models are involved

Involved in model ISC3500-EL, ISC2500-S and so on, the specific manufacturer should be more familiar ..

Some devices can also be connected through ssh.



Two general-purpose FTP account and password are found in the security monitoring device.

Respectively: username downloadusr password h3ckey

Username root Password passwd

All permissions are root.

(There are also many device web management systems with general weak passwords admin/admin)

Case:
 

Device **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** username root Password passwd

 

 

 

 

 

 

Solution:

Contact the manufacturer.