SCADA Default Password Database (SDPD)

Critical Infrastructure, SCADA, ICS and IoT Default Password Database...

Looking for more data? for more information about CRITIFENCE API, e-mail to api@critifence.com

Product	Vendor	Type	Username:Password
AC 800M	ABB	Controller	service:ABB800xA
SREA-01	ABB	Ethernet Adapter Module	admin:admin
RTU500	ABB	Ethernet Adapter Module	admin:admin
A850 Telemetry Gateway	Adcon Telemetry	Base Station	root:840sw
A850 Telemetry Gateway (ver2)	Adcon Telemetry	Base Station	root:840sw
A440 Wireless Modem	Adcon Telemetry	Base Station	root:840sw
addVANTAGE Pro 6.1, 6.5	Adcon Telemetry	HMI	root:root
SNMP-1000, MIC-3924	Advantech	system management module, intelligent chassis management module	advantech:admin
Advantech WebAccess browser-based HMI and SCADA software	Advantech	browser-based HMI and SCADA software	admin:blank
EKI-7659C	Advantech	industrial switch	admin:admin
EKI-7657C	Advantech	industrial switch	admin:admin
ADAM-6200 Series	Advantech	Intelligent Ethernet I/O Module	root:00000000
ADAM-6050W	Advantech	I/O module	root:00000000
ADAM-3600-A1F	Advantech	Remote I/O Module	Root:00000000, Admin:00000000, User:00000000
OmniSwitch 6250	Alcatel-Lucent	switch	admin:switch
AT-IE200-6GT (IE200 Series)	Allied Telesis	Industrial Ethernet Switches	manager:friend
AT-IE200-6GP (IE200 Series)	Allied Telesis	Industrial Ethernet Switches	manager:friend
AT-IE200-6FT (IE200 Series)	Allied Telesis	Industrial Ethernet Switches	manager:friend
AT-IE200-6FP (IE200 Series)	Allied Telesis	Industrial Ethernet Switches	manager:friend
KVGC202/EN/M/E11	Alstom	Relays	AAAA
MiCOM P141/P142/P143/P342/P343/P344/P345/P346/P391	Alstom	Relays	AAAA
Argus Messenger	Argus	Messenger	ArgusAdmin:masterkey
Argus Address Manager	Argus	Address Manager Software	argus:argus
ASTUTE140 Meter	Astute Medical	Analyzer	1234:1234
CR10 v2	B&B ELECTRONICS	Industrial router	root:root
Conel 4.0.1	B&B ELECTRONICS	Industrial router	root:root
SPECTRE Router	B&B ELECTRONICS	Router	root:root
ER75i	B&B ELECTRONICS	Industrial router	root:root
ER 75i DUO	B&B ELECTRONICS	Industrial router	root:root
ER 75i SL	B&B ELECTRONICS	Industrial router	root:root
ER75i v2	B&B ELECTRONICS	Industrial router	root:root
LR77 v2 Libratum/LR77 v2	B&B ELECTRONICS	Industrial router	root:root
UR5i v2	B&B ELECTRONICS	Industrial router	root:root
UCR11-v2	B&B ELECTRONICS	Industrial router	root:root
UCR11 v2 SL	B&B ELECTRONICS	Industrial router	root:root
XR5i v2E	B&B ELECTRONICS	Industrial router	root:root
XR5i v2	B&B ELECTRONICS	Industrial router	root:root
XR5i	B&B ELECTRONICS	Industrial router	root:root
XR5i SL	B&B ELECTRONICS	Industrial router	root:root
ES1A	B&B ELECTRONICS	Converter	root:dbps
Vlinx VESR4x4	B&B ELECTRONICS	SERIAL SERVER
Vlinx MESR9xx Modbus Gateway	B&B ELECTRONICS	Modbus Gateway
MediCal QAWeb Agent	Barco	Client Application	Advanced:advanced
IPC@CHIP	Beck IPC	PLC	PPPSERVER:, ppps:ppps
CX5020	Beckhoff Automation GmbH	PLC	webguest:1
TwinCAT	Beckhoff Automation GmbH	Software for the Windows control and automation technology	Administrator:1
BinTec X1200 II	BinTec Elmeg	Router	admin:bintec,
any routers	BinTec Elmeg	Router	(##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin
BinTec R230aw	BinTec Elmeg	Router	admin:funkwerk
Bintec W2002T-n	BinTec Elmeg	WLAN Access Point for applications in rolling stocks	admin:funkwerk, admin:admin
bk3000	BK Ultrasound	Ultrasound System	administrator:superuser
easy/easy compact/easy split	CAREL	Electronic Microprocessor Controllers, plug-in electronic digital thermostat	22 (access to the parameters)
PJ32V/PJ32W/PJ32Z	CAREL	Electronic Microprocessor Controllers, plug-in electronic digital thermostat	22 (access to the parameters)
pCOWeb	CAREL	Communication Card	root:froot, carel:fcarel, guest:fguest, httpadmin:fhttpadmin (ftp), admin:fadmin (http), passwordless accounts via telnet: http::48:48:HTTP users:/usr/http/root:/bin/bash, nobody::99:99:nobody:/var/lib/nobody:/bin/bash
ir33 (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
ir33 power (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
ir33 DIN (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
powercompact (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
powercompact small (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
mastercella (ir33 platform)	CAREL	Integrated Electronic Microprocessor Controllers with LED display	22 (access to the parameters), 66 (download activation password)
Universal Infrared Series	CAREL	Pressure, Humidity and Temperature controllers	22 (enter and modify parameters C0, C13, 15 and 16 in addition to all ???P??? parameters), 77 (enter and modify all parameters)
IR33-DN33 Universale series	CAREL	Pressure, Humidity and Temperature controllers	77 (Setting type c, d, F parameters)
pRack PR100	CAREL	Compressor Rack Controller	user password: 0000, service password: 1234, manufacturer password: 1234
humiSteam x-plus	CAREL	Humidifiers	77
PlantVisorPRO Locale	CAREL	Plant supervision	admin:admin
PlantWatchPRO	CAREL	Supervisor for small-medium installations	PVRemote:PD35010 (from a remote PC via a telephone connection)
mC2SE	CAREL	Electronic Controller	Direct level: , user level: 22, super user level: 11, factory level: 66
PowerSoft	Carlo Gavazzi	Modular Software	admin:admin, user:user
In-Row M52 Microprocessor	ClimateWorx International	Controller	1024 (Service level)
M52 Microprocessor	ClimateWorx International	Controller	Level 1: 1024, level 2: 4321, level 3: 1234
ClinicPro EMR	ClinicPro	Electronic Medical / Health Records Software	admin:abc123
E-Series EEG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)	Compumedics	Electroencephalograph Systems,data acquisition systems, HMI software	0000 (security dialogue password)
E-Series EEG/PSG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)	Compumedics	Electroencephalograph Systems,data acquisition systems, HMI software	0000 (security dialogue password)
BASRT-B	Contemporary Control Systems	Router	admin:admin
UR5i	Datasensor	Router	root:root
UR5i SL	Datasensor	Router	root:root
S/5 Light Monitor	Datex-Ohmeda	Portable vital signs monitor	16-04-34
AWC 500	Deif	Advanced Wind turbine Controller	root:deif7800 (administrator), default:1234 (user)
DC-ME-01T-S	Digi	Networking Modules	root:dbps
Digi Connect SP	Digi	Network Device Server Module	root:dbps
Digi Connect Wi-SP	Digi	Network Device Server Module	root:dbps
Digi Connect ME	Digi	Network Device Server Module	root:dbps
Digi Connect ME 4 MB	Digi	Network Device Server Module	root:dbps
Digi Connect Wi-ME	Digi	Network Device Server Module	root:dbps
Digi Connect EM	Digi	Network Device Server Module	root:dbps
Digi Connect Wi-EM	Digi	Network Device Server Module	root:dbps
Digi Connect ES 4/8 SB with Switch	Digi	Concentrator	root:dbps
Digi Connect ES 4/8 SB	Digi	Concentrator	root:dbps
ConnectPort TS 4x4	Digi	Terminal Server	root:dbps
ConnectPort TS 4x2	Digi	Terminal Server	root:dbps
ConnectPort TS W	Digi	Terminal Server	root:dbps
ConnectPort TS 8	Digi	Terminal Server	root:dbps
ConnectPort TS 8 MEI	Digi	Terminal Server	root:dbps
ConnectPort TS 16	Digi	Terminal Server	root:dbps
Digi Connect WAN	Digi	Industrial router	root:dbps
Digi Connect WAN GPRS	Digi	Industrial router	root:dbps
Digi Connect WAN GSM-R	Digi	Industrial router	root:dbps
Digi Connect WAN VPN	Digi	Industrial router	root:dbps
Digi Connect WAN IA	Digi	Industrial router	root:dbps
Digi Connect WAN 3G	Digi	Industrial router	root:dbps
Digi Connect WAN 3G IA	Digi	Industrial router	root:dbps
Digi Connect WAN 4G	Digi	Industrial router	root:dbps
Digi TransPort WR21	Digi	Industrial router	username:password
Digi TransPort WR44	Digi	Industrial router	username:password
Digi CM	Digi	Industrial router	root:dbps
DigiOne IAP Serial	Digi	Gateway	root:dbps
i.LON SmartServer	Echelon	Programmable Modules	for ftp and lns servers: ilon:ilon
i.LON SmartServer	Echelon	Building Energy Management Solution, LonWorks/IP Server, Internet Server	ilon:ilon
i.LON SmartServer 2.0	Echelon	Building Energy Management Solution, LonWorks/IP Server, Internet Server	ilon:ilon
i.LON 600	Echelon	Building Energy Management Solution, LonWorks/IP Server, Internet Server	ilon:ilon
i.LON 100e4	Echelon	Building Energy Management Solution, LonWorks/IP Server, Internet Server	ilon:ilon
LumInsight	Echelon	Central Management System	Echelon:echeloncorp
Nexus 1500	Electro Industries/GaugeTech	Power Quality Meter	anonymous:anonymous
Nexus 1500+	Electro Industries/GaugeTech	Power Quality Meter	anonymous:anonymous
Communicator EXT 3.0	Electro Industries/GaugeTech	Power Monitoring Software	eignet:inp100
AMS Suit	Emerson	diagnostic software	admin:, sa:42Emerson42Eme (SQL Server)
DeltaV Digital Automation System	Emerson	Automation System	Administrator:deltav
Liebert IntelliSlot Web Card	Emerson	Web Card	Liebert:Liebert, User:User
Liebert OpenComms Web Card	Emerson	Web Card	Liebert:Liebert
Smart Wireless Gateway 1420	Emerson	Wireless Gateway	admin:default, maint:default, oper:default, exec:default
Smart Wireless Navigator	Emerson	stand-alone network infrastructure management tool	for the Windows log in Administrator:navigator, for Smart Wireless Navigator log in Supervisor:Admin, User1:Password1, User2:Password2, User3:Password3
Network Power MPH2 Rack PDU	Emerson	Rack PDUs	admin:admin
UL33 UPS	Emerson	UPS	123456
Control Link Refrigeration System Controller	Emerson	Controller	0
UltraSite	Emerson	Software	User 01:100, User 05:200, User 09:300, Engineer:400
Avocent ACS 6000 Advanced Console Server	Emerson	Console Server	admin:avocent, root:linux
ROCLINK 800	Emerson	Software	LOI:1000
ControlWave Micro Quick	Emerson	PLC	for download project:, SYSTEM:666666
IP-KVM Avocent MergePoint Unity	Emerson	Switch	Admin:blank
Ovation DCS	Emerson	Switch for Distributed Control System	wdpf
Ovation DCS	Emerson	Switch for Distributed Control System	SNMP community string: wdpfRO
Fieldgate FXA520	Endress+Hauser	Gateway for remote monitoring and diagnosis	super:super
Fieldgate Viewer	Endress+Hauser	HMI software	admin:0000
EMG-10	ENTES	MODBUS Gateway	emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-02	ENTES	MODBUS Gateway	emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-12	ENTES	MODBUS Gateway	emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
DTR-10	ENTES	time relay	0
MCB-125	ENTES	time relay	0
MCB-126	ENTES	time relay	0
MPR-53CS	ENTES	network analyzer	0
GEM-05	ENTES	GPRS/Modbus Gateway	gem10
GEM-10	ENTES	GPRS/Modbus Gateway	gem10
GEM-10SH	ENTES	GPRS/Modbus Gateway	gem10
ENTBUS PLUS	ENTES	Energy Management Software	admin:1234
EPM-04/04C/04CS	ENTES	MULTIMETER	0
MPR-SW	ENTES	Monitoring & Reporting Software	admin:
All	eWON	Router	adm:adm
USHA	Falcon	UPS SNMP HTTP AGENT	USHA:admin
SymDec 4	General Electric	Video Streaming Recorder	Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
WebServer	General Electric	Video Streaming Recorder	Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SymNav	General Electric	Video Streaming Recorder	Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
Cimplicity	General Electric	Video Streaming Recorder	Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
CIMPLICITY WebView	General Electric	Video Streaming Recorder	Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SNMP/Web Interface	General Electric Digital Energy	SNMP/Web Interface	GE:GE (Telnet, HTTP), public (SNMP community string)
FASTlab Synthesizer	General Electric Healthcare	Synthesizer	Admin:admin
TRACERlab FX2 devices (model C, MeI and N)	General Electric Healthcare	Synthesis module	admin:tracerlab (physical access required)
TRACERlab FX2 M	General Electric Healthcare	Chemistry Synthesizer	tracerlab:tracerlab (for remote access), admin:tracerlab
HiSpeed CT/i	General Electric Healthcare	Computed Tomography Scanner	root:#bigguy, ctuser:4$apps
Lightspeed QX/i	General Electric Healthcare	Computed Tomography Scanner	root:#bigguy, ctuser:4$apps
Discovery CT590 RT	General Electric Healthcare	Computed Tomography Scanner	root:#bigguy
Optima CT580	General Electric Healthcare	Computed Tomography Scanner	root:#bigguy
Datex-Ohmeda Engstrm Ventilator	General Electric Healthcare	Carestation Ventilators	23-17-21 (Super User), 34-22-14 (service-level)
IC695PNC001	General Electric Intelligent Platforms	PROFINET Controller	admin:system
IC695ECM850	General Electric Intelligent Platforms	IEC 61850 Client	admin:system
IC695ETM001	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC695CPE305	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC695CPE310	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC695CPE330	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698ETM001	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CPE010	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CPE020	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CRE020	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CPE030	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CPE040	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CRE030	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CRE040	General Electric Intelligent Platforms	Ethernet module/programmable controller	system
IC698CPE030	General Electric Intelligent Platforms	Programmable controller with built-in web server	user:system
IC698CPE040	General Electric Intelligent Platforms	Programmable controller with built-in web server	user:system
IC698CRE030	General Electric Intelligent Platforms	Programmable controller with built-in web server	user:system
IC698CRE040	General Electric Intelligent Platforms	Programmable controller with built-in web server	user:system
Netmonitor	Heatmiser	gateway between the outside world and heating system	admin:admin
NETLink PRO HW 1-1a-1 and FW 1. 54 and higher	Helmholz Systeme	Ethernet Gateway for MPI/PROFIBUS	NETLink PRO PoE:admin
RS20	Hirschmann	Switch	user:public, admin:private
RS30	Hirschmann	Switch	user:public, admin:private
MICE	Hirschmann	Switch	user:public, admin:private
RSP 20	Hirschmann	Industrial router	user:public, admin:private
RSP 25	Hirschmann	Industrial router	user:public, admin:private
RSP 30	Hirschmann	Industrial router	user:public, admin:private
RSP 35	Hirschmann	Industrial router	user:public, admin:private
MACH 4000 Family	Hirschmann	Industrial router	user:public, admin:private
MACH 1000 Family	Hirschmann	Industrial router	user:public, admin:private
MACH 100 Family	Hirschmann	Industrial router	user:public, admin:private
MACH 4002 Family	Hirschmann	Industrial router	user:public, admin:private
MACH104 Family Full Gigabit	Hirschmann	Industrial router	user:public, admin:private
MACH 1040 Family Full Gigabit	Hirschmann	Industrial router	user:public, admin:private
OCTOPUS 8M	Hirschmann	Industrial router	user:public, admin:private
OCTOPUS 16M	Hirschmann	Industrial router	user:public, admin:private
OCTOPUS 24M	Hirschmann	Industrial router	user:public, admin:private
EAGLE 20	Hirschmann	Industrial ETHERNET Firewall	admin:private, user:public
EUB-550	Hitachi	Ultrasound Diagnostic Scanner	Service Tools:SERVICETOOL
Web Controller	Hitachi	Controller	admin:1111
LK SERIES PLC	HollySys Automation Technologies	PLC	FTP blank, Telnet blank
Honeywell XL	Honeywell	Controller	Guest:guest, SysAdmin:honey
Alerton BCM-WEB	Honeywell	BACtalk control module, Web server and Configurator CD	pass
NetAXS	Honeywell	Access Control Unit	admin:admin
PIKO-Inverter 3.0, 3.6, 4.2, 5.5, 7.0, 8.3, 10.1	Kostal Solar	solar inverter, storage system	pvserver:pvwr
PIKO BA Storage System	Kostal Solar	solar inverter, storage system	pvserver:pvwr
EDS-MD 4	Lantronix	Medical Device Server	admin:PASS
EDS-MD 8	Lantronix	Medical Device Server	admin:PASS
EDS-MD 16	Lantronix	Medical Device Server	admin:PASS
L-DALI DALI Light Controller	LOYTEC Electronics	Multiple Devices	admin:loytec4u
L-INX Automation Server	LOYTEC Electronics	Multiple Devices	admin:loytec4u
L-GATE Universal Gateway	LOYTEC Electronics	Multiple Devices	admin:loytec4u
L-IP CEA-709/IP Router	LOYTEC Electronics	Multiple Devices	admin:loytec4u
L-VIS	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LIOB-10x I/O Module	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LIOB-x5x I/O Module	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LIP-ME20X L-IP BACnet Router	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LWEB-802 Building Management System	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LWEB-803 Building Management System	LOYTEC Electronics	Multiple Devices	admin:loytec4u
LWEB-900 Building Management System	LOYTEC Electronics	Multiple Devices	admin:loytec4u
L-Proxy CEA-709 Gateway	LOYTEC Electronics	Gateway	admin:admin
NetBeacon Element Management Software	Metrobility	HMI Software	guest:guest, admin:admin, root:root
PLC QnUCPU QnUDVCPU	Mitsubishi	PLC	MELSEC:MELSEC
PLC QnUCPU QnUDE(H)CPU	Mitsubishi	PLC	QNUDECPU:QNUDECPU
MES3-255C-EN	Mitsubishi	Web server	ecoV:ecopass, guest:user
AirWorks AWK-3131-RCC	Moxa	Industrial 802.11n wireless AP/bridge/client	admin:root
Railway Remote I/O (ioLogik E12xx)	Moxa	Remote Ethernet I/O	HTTP on Port 9020: 1)none:root, 2)none:none
Railway Remote I/O (ioLogik E15xx)	Moxa	Remote Ethernet I/O	HTTP on Port 9020: 1)none:root, 2)none:none
Cellular Micro RTU Controller (ioLogik W53xx, ioLogik)	Moxa	micro RTU controller	administrator:blank, Telnet on port 9900 / 9000: root:root
VPort 461 Industrial Video Encoder	Moxa	Industrial Video Encoder	admin:admin, :
IA240 Embedded computer	Moxa	Embedded computers are designed for industrial, automation applications	telnet root:root, FTP root:blank, PPP root:root, serial console root:root
IA241 Embedded computer	Moxa	Embedded computers are designed for industrial, automation applications	telnet root:root, FTP root:blank, PPP root:root, serial console root:root
OnCell Central Manager	Moxa	Software	admin:admin
EDS-505A Series	Moxa	Switch	admin:
EDS-508A Series	Moxa	Switch	admin:
OnCell G3100 Series	Moxa	Cellular IP Gateways	HTTP admin:admin, HTTP Admin:Keep , PAP admin:
3G21WB (BigPond Firmware)	Netcomm Wireless	Router	admin:admin
3G9WB (BigPond Firmware)	Netcomm Wireless	Router	admin:admin
N3G001W (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB14WN (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB5 (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB5Plus4 (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB6Plus4 (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB6Plus4W (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NNB7 (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB9WMAXX (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NP804N (Netcomm Firmware)	Netcomm Wireless	Router	admin:admin
NB1300 Plus 4 (Netcomm Firmware)	Netcomm Wireless	Router	admin:password
NP803N (Netcomm Firmware)	Netcomm Wireless	Router	admin:password
SuperView	NOVUS AUTOMATION	SCADA	superview:superview
AirGate-3G	NOVUS Automation	Dual SIM Industrial Cellular VPN Router	admin:admin
N1040	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N480D	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N960	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1020	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1040i	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1540	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N2000	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N3000	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N120	NOVUS Automation	Temperature Controller	1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
Dragon Medical 360 Network Edition	Nuance	Medical Speech Recognition Software Solutions	admin:password
NS-Series Programmable Terminals Web Interface (NS12-TS01-V2, NS10-TV01-V2, NS8-TV01-V2, NS5-SQ11-V2, NS5-TQ11-V2 and NS5-MQ11-V2)	Omron	Programmable Terminals	default:default
CJ1M CPU Units with Ethernet Functions	Omron IA	PLC	for http: ETHERNET, for ftp: CONFIDENTIAL
EH-net server	Ouman	HMI Software	admin:admin
JouleTemp	Phasefale Controls	PLC	admin:pass
Logic+	Phoenix Contact	Software	admin:admin
AUTOPLATE	PIPS Technology	license plate recognition system	(Telnet), wl_test:wl_test, vesstore:vesstore, ftp_boot:ftp_boot (FTP)
ICX30-HWC	Prosoft Technology	Industrial Cellular Gateway	admin:password
1756-EN2TSC	Rockwell Automation / Allen-Bradley	EtherNet/IP communication module	Administrator:admin
1734-AENT	Rockwell Automation / Allen-Bradley	I/O Adapter	admin:password
1756-EWEB	Rockwell Automation / Allen-Bradley	Web Server Module	Administrator:
1768-EWEB	Rockwell Automation / Allen-Bradley	Web Server Module	Administrator:
9300-RADES	Rockwell Automation / Allen-Bradley	Industrial Modem	HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM, CHAP/PAP: ppp_user:ZYPCOM
9300-8EDM	Rockwell Automation / Allen-Bradley	Industrial Switch	HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM
MicroLogix 1100 Embedded Web Server	Rockwell Automation / Allen-Bradley	Web Server	guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
MicroLogix 1400 Embedded Web Server	Rockwell Automation / Allen-Bradley	Web Server	guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/, PVPlus 6	Rockwell Automation / Allen-Bradley	SCADA	password
TROVIS 5590 Web Module	SAMSON GROUP	Web Module	To read data 1111:1111, To change data 4444:4444
Integrated Management System DMS	Samsung	Data Management Server	root:rkwjsdusrnth
Integrated Management System S-NET mini	Samsung	S-NET IMS	DMS Connection: 0000 or 1234
PowerLogic Series 800 Power Meter (PM800)	Schneider Electric	Power Monitoring Module	0
PowerLogic Series 800 Power Meter (PM820SD)	Schneider Electric	Power Monitoring Module	0
PowerLogic Series 800 Power Meter (PM870SD)	Schneider Electric	Power Monitoring Module	0
PowerLogic Power Meter	Schneider Electric	Power Monitoring Module	0
PowerLogic ION7550 Energy and power meter	Schneider Electric	Energy and power meter	0
PowerLogic ION7650 Energy and power meter	Schneider Electric	Energy and power meter	0
PowerLogic ION8650 Energy and power meter	Schneider Electric	Energy and power meter	0
PowerLogic Ethernet Gateway EGX100	Schneider Electric	Integrated gateway-server	Administrator:Gateway
PowerLogic Ethernet Gateway EGX300	Schneider Electric	Integrated gateway-server	Administrator:Gateway
PowerLogic EGX200 (with firmware version 5.5 or higher)	Schneider Electric	gateway-server	Administrator:admin, User 1:master, User 2:engineer, User 3:operator
PowerLogic EGX400 (with firmware version 5.5 or higher)	Schneider Electric	gateway-server	Administrator:admin, User 1:master, User 2:engineer, User 3:operator
Modicon Quantum	Schneider Electric	PLC	ftpuser/password, qbf77101/hexakisoctahedron, USER:USER
Modicon M340	Schneider Electric	PLC	ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon M340 for Ethernet	Schneider Electric	PLC	ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon Premium	Schneider Electric	PLC	FTP: sysdiag:factorycast@schneider, HTTP: USER:USER
PowerLogic PM8000 Power Meter	Schneider Electric	PLC	Physical: 0, FTP: 8000:
PowerLogic PM8240 Power Meter	Schneider Electric	PLC	Physical: 0, FTP: 8000:
PowerLogic PM8243 Power Meter	Schneider Electric	PLC	Physical: 0, FTP: 8000:
PowerLogic PM8244 Power Meter	Schneider Electric	PLC	Physical: 0, FTP: 8000:
TSX ETG 1000	Schneider Electric	PLC	HTTP Server, PAP Protocol: USER:USER, FTP: wsupgrade:wsupgrade, Serial Connection: Administrator:Gateway
ETG100	Schneider Electric	PLC	Administrator:Gateway
M258	Schneider Electric	PLC	adm:adm
Quantum NOE 771 xx	Schneider Electric	Ethernet Modules	pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
CitectSCADA	Schneider Electric	Ethernet Modules	pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
Simatic S7-300 (pre-2009 versions)	Siemens	PLC	Hardcoded password: Basisk:Basisk
Simatic S7-1200	Siemens	PLC	admin:blank
Simatic S7-1500	Siemens	PLC	admin:blank
Scalance X-200	Siemens	Industrial Ethernet Switches	admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-1PRO	Siemens	Industrial Wireless LAN, Industrial Ethernet Switches	admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-2PRO	Siemens	Industrial Wireless LAN, Industrial Ethernet Switches	admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
Synco living Web server OZW772 V2.0	Siemens	Web-server	Administrator:Password
Siemens WinCC 7.x	Siemens	HMI Software	winccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator
Ruggedcom RMC30	Siemens	Industrial router	admin:admin, operator:operator, guest:guest
RUGGEDCOM ROX II for RX1500, RX1501, RX1510, RX1511, RX1512	Siemens	Ethernet Switches Layer 3 / Routers	root:admin (service), admin:admin (administrator), oper:oper (operator), guest:guest (guest)
RuggedSwitch RS8000	Siemens	Industrial router	admin
RuggedSwitch RS1600	Siemens	Industrial router	admin
RuggedSwitch RS900	Siemens	Industrial router	admin
Siemens ST950	Siemens	Intersection controller	root:zP2wxY4uE
Siemens Climatix	Siemens	PLC	Level 6 End users: 1000 (Physical), Level 4 Service operator: 2000 (Physical), Level 2 OEM: 6000 (Physical), Web: ADMIN:SBTAdmin!
Sicam SGU	Siemens	RTU	642935177
Sicam SGU	Siemens	RTU	admin@root:charleM!800
SC 7000	Siemens	Patient Monitors Service	4712 (passcode, physical access required)
SC 9000XL	Siemens	Patient Monitors Service	4712 (passcode, physical access required)
AirLink	Sierra Wireless	3G/4G gateway	sconsole:12345
AirLink	Sierra Wireless	3G/4G gateway	user:12345, viewer:12345
eSolar	Sinapsi	Web-Server for photovoltaic applications	admin:admin
Sunny WebBox	SMA Solar Technology	ICS device for data logging	Installer:sma
Stulz WIB 8000	Stulz GmbH	PLC	Administrator, highest authorization: ganymed, Medium authorization: kallisto, Lowest authorization: europa
TAC Xenta 500/700/911	TAC AB	PLC	root:root
TAC Xenta 913	TAC AB	PLC	root:root
TAC Xenta 511	TAC AB	PLC	root:root
TAC Xenta 527	TAC AB	PLC	root:root
Tecomat Foxtrot	Tecomat	PLC	0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9)
ATMS.now	Trafficware	Advanced Traffic Management System	naztec:naztec
NiagaraAX (ver 1)	Tridium	Software for JACE-2, JACE-403 or JACE-545	tridium:niagara
NiagaraAX (ver 2)	Tridium	Software for JACE-2, JACE-403 or JACE-545	tridium:niagara
NiagaraAX (ver 3)	Tridium	Software for JACE-2, JACE-403 or JACE-545	tridium:niagara
BL20-E-GW-EN	Turck	PLC	HTTP: password, FTP: (unspecified hardcoded)
BL67-E-GW-EN	Turck	PLC	HTTP: password, FTP: (unspecified hardcoded)
AirControl	Ubiquiti	Web Management Application	ubnt:ubnt
AirOS	Ubiquiti	operation system	ubnt:ubnt
WAGO-I/O-SYSTEM??750	Wago	Controller	admin:wago, user:user, guest:guest
WAGO-I/O-IPC 758-870/000-xxx	Wago	Compact Industrial PC?	http, ftp:, user:user00 , administrator:, su:ko2003wa
Modular I/O-System Linux Fieldbus Coupler 750-860	Wago	PLC	root:wago , admin:wago, user:user , guest:guest
SoftCare Evo Type SE10	WashTec	Roll-over car wash system	00001 (limited access), 00000 (unlimited access)
KingSCADA 3.0	Wellintech	Software	administrator:administrator (role KVAdministrator)
TDW 33	Westermo	Industrial Modem	no password, just return, Hardcoded password: n3Y9kA6otYZu8, (?? TD-36)
MRD-305-DIN	Westermo	Industrial router	admin:westermo
MRD-310	Westermo	Industrial router	admin:westermo
MRD-315	Westermo	Industrial router	admin:westermo
MRD-330	Westermo	Industrial router	admin:westermo
MRD-355	Westermo	Industrial router	admin:westermo
MRD-350	Westermo	Industrial router	admin:westermo
MRD-455	Westermo	Industrial router	admin:westermo
RedFox Series	Westermo	Industrial router	admin:westermo
Wolverine Series	Westermo	Industrial router	admin:westermo
Lynx Series	Westermo	Industrial router	admin:westermo
Falcon Series	Westermo	Industrial router	admin:westermo
Viper Series	Westermo	Industrial router	admin:westermo
Historian	Wonderware	SQL Server	SQL Server Login: aadbo:pwddbo, wwdbo:pwddbo, aaAdmin:pwAdmin, wwAdmin:wwAdmin, aaPower:pwPower, wwPower:wwPower, aaUser:pwUser, wwUser:wwUser
Intouch	Wonderware	SCADA	Administrator:Wonderware
System Platform/Archestra	Wonderware	Integrated Development Environment	administrator:blank
442SR	Xzeres	small wind turbine	MyTurbine:m442+SRt
YFGW410 gateway	Yokogawa	Wireless Management Station	admin:!admin
DX1000	Yokogawa	Software	Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX1000N	Yokogawa	Software	Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX2000 Advanced	Yokogawa	Software	Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
CENTUM CS 3000 DCS	Yokogawa	Distributed Control System	CENTUM:CENTUM
EJX910A Multivariable Transmitter HART Communication Type	Yokogawa	Multivariable transmitter	YOKOGAWA. (to release the Write Protect mode),
WT 3000 Driver	Yokogawa	Precision Power Analyzer	anonymous:blank (Ethernet access)
Nightingale PPM3	Zoe Medical	Vital Sign Monitor With CO2	Set Dial 1 to 49, Set Dial 2 to 48, Set Dial 3 to 46

Credits and Thanks

• toolswatch - DPE Default Password Enumeration | http://www.toolswatch.org
  
• scadastrangelove - SCADAPASS | http://www.scada.sl
  
• hackers-arise | https://www.hackers-arise.com
  
• CRITIFENCE Critical Infrastructure and SCADA-ICS Cyber Threats Research Group.