Weak device passwords can penetrate the entire company.

Weak device passwords can penetrate the entire company.

Our company is familiar with ruijie's equipment. Ruijie's device is a word, garbage, garbage
As long as a small router is in the LAN and the same gateway is set up, the company's network is paralyzed directly, which is worse than ARP. I guess the same is true for devices from other vendors. Xinliang. Digress

Detailed description:

Administrator error, no security awareness IP address is **. **/index.htm account password admin

Proof of vulnerability:

The IP address is **. **/index.htm account and password admin

Configure VPN
 

 

 

Connection successful

Enter Intranet

Currently, the number of online users is 101, and the network segment is **.**.**.**-**.**.**.**
 

The following are IP segments

Code Region

**.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.****.**.**.**

The following is simple: scan on, find the server, and scan 3389. Various databases to find vulnerabilities,

Then arp hijacking, various links, various cook

It is not pasted. It is sensitive. Click it to the end.

Solution:

Change the account password,

By the way, the invitation code. Haha