IoT Security
Hard-coded credentials found in widely deployed badge reader controllers
A maintenance account with a fixed password is reachable on the management network of thousands of buildings.
/ 4 min read
In briefA maintenance account with a fixed password is reachable on the management network of thousands of buildings.
The account cannot be disabled through the web interface and no firmware fix is available yet.
Facilities teams should isolate controller management interfaces on a dedicated network segment.
Filed under Security ArchitectureIoT Security
Does this story affect you?
Tell us about your environment and a SentriXa security editor will get back to you within one business day.