The Dangers of Default Passwords: Why Changing Default Settings is Crucial.

Affected Products

Here is a list of systems, devices or products that commonly use default passwords:

• Routers, access points, switches, firewalls, and other network equipment.
• Databases and management systems, including IDMS, Oracle, and Microsoft SQL.
• Web applications and Administrative web interface.
• Industrial Control Systems (ICS) systems.
• Other embedded systems and devices
• Remote terminal interfaces like Telnet and SSH

Best Practices

• Change Password:
  Change default passwords before deploying the system on a
  network with internet access. Use a sufficiently strong and unique password.
• Apply Updates:
  Turn on automatic updates for your programs and devices to ensure
  the latest security patches are applied.
• Restrict Network Access:(MFA):
  Restrict network access to trusted hosts and networks and
  only allow internet access to required network services.
• Scan and Monitor:
  Scan your environment regularly to ensure no systems on your
  network are using default passwords.
• Authentication Mechanisms:
  Wherever possible, add an extra layer of security using
  authentication mechanisms like Multifactor authentication, Kerberos, x.509
  certificates, public keys, etc.

By adhering to these best practices of default passwords, organisations can reduce the risk
of unauthorised access and data breaches.