T1078.001Initial AccessPersistencePrivilege EscalationStealth
Default Accounts
Adversaries may obtain and abuse credentials of a default account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion. Default accounts are those that are built-into an OS, such as the Guest or Administrator accounts on Windows systems. Default accounts also include default factory/provider set accounts on other types of systems, software, or devices…
CVEs9
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.0
Reports0
Detections
4 Sigma rules tagged T1078.001Default AccountsT1078.0014 general rules
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Default Accounts
9 CVEs, by priority. Each link shows its badge.- CVE-2020-14510OFF-BY-ONE ERROR CWE-193Secomea · GateManagerCritical · 9.8T1078.001Default AccountsT1059Command and Scripting Interpreter+1 moreMITRE CTID mapping of the CVE · primary impact2.5%Top 15%23.8priority
- CVE-2020-5374Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1…Dell · OMIMSSC (OpenManage Integration for Microsoft System Center)High · 8.8T1078.001Default AccountsMITRE CTID mapping of the CVE · primary impact1.0%Top 36%19.0priority
- CVE-2019-10990Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password…Medium · 6.5T1078.001Default AccountsMITRE CTID mapping of the CVE · primary impact1.3%Top 29%18.8priority
- CVE-2020-5364Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerabilityMITRE CTID mapping of the CVE · primary impact1.0%Top 38%16.2priority
- CVE-2020-5365Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerabilityMITRE CTID mapping of the CVE · primary impact1.0%Top 38%16.2priority
- CVE-2018-10633Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100 utilizes hard-coded credentials that may allow…Universal Robots · Universal Robots Robot Controller version CB 3.1, SW Version 3.4.5-100T1078.001Default AccountsMITRE CTID mapping of the CVE · primary impact1.8%Top 21%15.7priority
- CVE-2018-11062Dell EMC Integrated Data Protection Appliance Undocumented Accounts VulnerabilityDell EMC · Integrated Data Protection ApplianceT1078.001Default AccountsMITRE CTID mapping of the CVE · primary impact1.8%Top 22%15.6priority
- CVE-2020-5231Opencast users with ROLE_COURSE_ADMIN can create new usersMITRE CTID mapping of the CVE · primary impact0.6%Top 50%13.3priority
- CVE-2018-15771Dell EMC RecoverPoint Information Disclosure VulnerabilityMITRE CTID mapping of the CVE · primary impact0.4%Top 64%7.2priority