A large number of security and monitoring devices in Yushi, Zhejiang Province have general design defects (root permission)
Multiple models are involved
Involved in model ISC3500-EL, ISC2500-S and so on, the specific manufacturer should be more familiar ..
Some devices can also be connected through ssh.
Two general-purpose FTP account and password are found in the security monitoring device.
Respectively: username downloadusr password h3ckey
Username root Password passwd
All permissions are root.
(There are also many device web management systems with general weak passwords admin/admin)
Case:
Device **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** the user name downloadusr password h3ckey is successfully verified **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** user name root Password passwd Verification Successful "device **. **. **. ** username root Password passwd
Solution:
Contact the manufacturer.