SCADA Default Password (SDPD)

CRITIFENCE® Critical Infrastructure, SCADA, ICS and IoT Default Password Database


Looking for more data? for more information about CRITIFENCE API, e-mail to api@critifence.com



Product Vendor Type Username:Password
AC 800MABBControllerservice:ABB800xA
SREA-01ABBEthernet Adapter Moduleadmin:admin
RTU500ABBEthernet Adapter Moduleadmin:admin
A850 Telemetry GatewayAdcon TelemetryBase Stationroot:840sw
A850 Telemetry Gateway (ver2)Adcon TelemetryBase Stationroot:840sw
A440 Wireless ModemAdcon TelemetryBase Stationroot:840sw
addVANTAGE Pro 6.1, 6.5Adcon TelemetryHMIroot:root
SNMP-1000, MIC-3924Advantechsystem management module, intelligent chassis management moduleadvantech:admin
Advantech WebAccess browser-based HMI and SCADA softwareAdvantechbrowser-based HMI and SCADA softwareadmin:blank
EKI-7659CAdvantechindustrial switchadmin:admin
EKI-7657CAdvantechindustrial switchadmin:admin
ADAM-6200 SeriesAdvantechIntelligent Ethernet I/O Moduleroot:00000000
ADAM-6050WAdvantechI/O moduleroot:00000000
ADAM-3600-A1FAdvantechRemote I/O ModuleRoot:00000000, Admin:00000000, User:00000000
OmniSwitch 6250Alcatel-Lucentswitchadmin:switch
AT-IE200-6GT (IE200 Series)Allied TelesisIndustrial Ethernet Switchesmanager:friend
AT-IE200-6GP (IE200 Series)Allied TelesisIndustrial Ethernet Switchesmanager:friend
AT-IE200-6FT (IE200 Series)Allied TelesisIndustrial Ethernet Switchesmanager:friend
AT-IE200-6FP (IE200 Series)Allied TelesisIndustrial Ethernet Switchesmanager:friend
KVGC202/EN/M/E11AlstomRelaysAAAA
MiCOM P141/P142/P143/P342/P343/P344/P345/P346/P391AlstomRelaysAAAA
Argus MessengerArgusMessengerArgusAdmin:masterkey
Argus Address ManagerArgusAddress Manager Softwareargus:argus
ASTUTE140 MeterAstute MedicalAnalyzer1234:1234
CR10 v2B&B ELECTRONICSIndustrial routerroot:root
Conel 4.0.1B&B ELECTRONICSIndustrial routerroot:root
SPECTRE RouterB&B ELECTRONICSRouterroot:root
ER75iB&B ELECTRONICSIndustrial routerroot:root
ER 75i DUOB&B ELECTRONICSIndustrial routerroot:root
ER 75i SLB&B ELECTRONICSIndustrial routerroot:root
ER75i v2B&B ELECTRONICSIndustrial routerroot:root
LR77 v2 Libratum/LR77 v2B&B ELECTRONICSIndustrial routerroot:root
UR5i v2B&B ELECTRONICSIndustrial routerroot:root
UCR11-v2B&B ELECTRONICSIndustrial routerroot:root
UCR11 v2 SLB&B ELECTRONICSIndustrial routerroot:root
XR5i v2EB&B ELECTRONICSIndustrial routerroot:root
XR5i v2B&B ELECTRONICSIndustrial routerroot:root
XR5iB&B ELECTRONICSIndustrial routerroot:root
XR5i SLB&B ELECTRONICSIndustrial routerroot:root
ES1AB&B ELECTRONICSConverterroot:dbps
Vlinx VESR4x4B&B ELECTRONICSSERIAL SERVER
Vlinx MESR9xx Modbus GatewayB&B ELECTRONICSModbus Gateway
MediCal QAWeb AgentBarcoClient ApplicationAdvanced:advanced
IPC@CHIPBeck IPCPLCPPPSERVER:, ppps:ppps
CX5020Beckhoff Automation GmbHPLCwebguest:1
TwinCATBeckhoff Automation GmbHSoftware for the Windows control and automation technologyAdministrator:1
BinTec X1200 IIBinTec ElmegRouteradmin:bintec,
any routersBinTec ElmegRouter(##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin
BinTec R230awBinTec ElmegRouteradmin:funkwerk
Bintec W2002T-nBinTec ElmegWLAN Access Point for applications in rolling stocksadmin:funkwerk, admin:admin
bk3000BK UltrasoundUltrasound Systemadministrator:superuser
easy/easy compact/easy splitCARELElectronic Microprocessor Controllers, plug-in electronic digital thermostat22 (access to the parameters)
PJ32V/PJ32W/PJ32ZCARELElectronic Microprocessor Controllers, plug-in electronic digital thermostat22 (access to the parameters)
pCOWebCARELCommunication Cardroot:froot, carel:fcarel, guest:fguest, httpadmin:fhttpadmin (ftp), admin:fadmin (http), passwordless accounts via telnet: http::48:48:HTTP users:/usr/http/root:/bin/bash, nobody::99:99:nobody:/var/lib/nobody:/bin/bash
ir33 (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
ir33 power (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
ir33 DIN (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
powercompact (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
powercompact small (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
mastercella (ir33 platform)CARELIntegrated Electronic Microprocessor Controllers with LED display22 (access to the parameters), 66 (download activation password)
Universal Infrared SeriesCARELPressure, Humidity and Temperature controllers22 (enter and modify parameters C0, C13, 15 and 16 in addition to all ???P??? parameters), 77 (enter and modify all parameters)
IR33-DN33 Universale seriesCARELPressure, Humidity and Temperature controllers77 (Setting type c, d, F parameters)
pRack PR100CARELCompressor Rack Controlleruser password: 0000, service password: 1234, manufacturer password: 1234
humiSteam x-plusCARELHumidifiers77
PlantVisorPRO LocaleCARELPlant supervisionadmin:admin
PlantWatchPROCARELSupervisor for small-medium installationsPVRemote:PD35010 (from a remote PC via a telephone connection)
mC2SECARELElectronic ControllerDirect level: , user level: 22, super user level: 11, factory level: 66
PowerSoftCarlo GavazziModular Softwareadmin:admin, user:user
In-Row M52 MicroprocessorClimateWorx InternationalController1024 (Service level)
M52 MicroprocessorClimateWorx InternationalControllerLevel 1: 1024, level 2: 4321, level 3: 1234
ClinicPro EMRClinicProElectronic Medical / Health Records Softwareadmin:abc123
E-Series EEG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)CompumedicsElectroencephalograph Systems,data acquisition systems, HMI software0000 (security dialogue password)
E-Series EEG/PSG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software)CompumedicsElectroencephalograph Systems,data acquisition systems, HMI software0000 (security dialogue password)
BASRT-BContemporary Control SystemsRouteradmin:admin
UR5iDatasensorRouterroot:root
UR5i SLDatasensorRouterroot:root
S/5 Light MonitorDatex-OhmedaPortable vital signs monitor16-04-34
AWC 500DeifAdvanced Wind turbine Controllerroot:deif7800 (administrator), default:1234 (user)
DC-ME-01T-SDigiNetworking Modulesroot:dbps
Digi Connect SPDigiNetwork Device Server Moduleroot:dbps
Digi Connect Wi-SPDigiNetwork Device Server Moduleroot:dbps
Digi Connect MEDigiNetwork Device Server Moduleroot:dbps
Digi Connect ME 4 MBDigiNetwork Device Server Moduleroot:dbps
Digi Connect Wi-MEDigiNetwork Device Server Moduleroot:dbps
Digi Connect EMDigiNetwork Device Server Moduleroot:dbps
Digi Connect Wi-EMDigiNetwork Device Server Moduleroot:dbps
Digi Connect ES 4/8 SB with SwitchDigiConcentratorroot:dbps
Digi Connect ES 4/8 SBDigiConcentratorroot:dbps
ConnectPort TS 4x4DigiTerminal Serverroot:dbps
ConnectPort TS 4x2DigiTerminal Serverroot:dbps
ConnectPort TS WDigiTerminal Serverroot:dbps
ConnectPort TS 8DigiTerminal Serverroot:dbps
ConnectPort TS 8 MEIDigiTerminal Serverroot:dbps
ConnectPort TS 16DigiTerminal Serverroot:dbps
Digi Connect WANDigiIndustrial routerroot:dbps
Digi Connect WAN GPRSDigiIndustrial routerroot:dbps
Digi Connect WAN GSM-RDigiIndustrial routerroot:dbps
Digi Connect WAN VPNDigiIndustrial routerroot:dbps
Digi Connect WAN IADigiIndustrial routerroot:dbps
Digi Connect WAN 3GDigiIndustrial routerroot:dbps
Digi Connect WAN 3G IADigiIndustrial routerroot:dbps
Digi Connect WAN 4GDigiIndustrial routerroot:dbps
Digi TransPort WR21DigiIndustrial routerusername:password
Digi TransPort WR44DigiIndustrial routerusername:password
Digi CMDigiIndustrial routerroot:dbps
DigiOne IAP SerialDigiGatewayroot:dbps
i.LON SmartServerEchelonProgrammable Modulesfor ftp and lns servers: ilon:ilon
i.LON SmartServerEchelonBuilding Energy Management Solution, LonWorks/IP Server, Internet Serverilon:ilon
i.LON SmartServer 2.0EchelonBuilding Energy Management Solution, LonWorks/IP Server, Internet Serverilon:ilon
i.LON 600EchelonBuilding Energy Management Solution, LonWorks/IP Server, Internet Serverilon:ilon
i.LON 100e4EchelonBuilding Energy Management Solution, LonWorks/IP Server, Internet Serverilon:ilon
LumInsightEchelonCentral Management SystemEchelon:echeloncorp
Nexus 1500Electro Industries/GaugeTechPower Quality Meteranonymous:anonymous
Nexus 1500+Electro Industries/GaugeTechPower Quality Meteranonymous:anonymous
Communicator EXT 3.0Electro Industries/GaugeTechPower Monitoring Softwareeignet:inp100
AMS SuitEmersondiagnostic softwareadmin:, sa:42Emerson42Eme (SQL Server)
DeltaV Digital Automation SystemEmersonAutomation SystemAdministrator:deltav
Liebert IntelliSlot Web CardEmersonWeb Card Liebert:Liebert, User:User
Liebert OpenComms Web CardEmersonWeb CardLiebert:Liebert
Smart Wireless Gateway 1420EmersonWireless Gatewayadmin:default, maint:default, oper:default, exec:default
Smart Wireless NavigatorEmersonstand-alone network infrastructure management toolfor the Windows log in Administrator:navigator, for Smart Wireless Navigator log in Supervisor:Admin, User1:Password1, User2:Password2, User3:Password3
Network Power MPH2 Rack PDUEmersonRack PDUsadmin:admin
UL33 UPSEmersonUPS123456
Control Link Refrigeration System ControllerEmersonController0
UltraSiteEmersonSoftwareUser 01:100, User 05:200, User 09:300, Engineer:400
Avocent ACS 6000 Advanced Console ServerEmersonConsole Serveradmin:avocent, root:linux
ROCLINK 800EmersonSoftwareLOI:1000
ControlWave Micro QuickEmersonPLCfor download project:, SYSTEM:666666
IP-KVM Avocent MergePoint UnityEmersonSwitchAdmin:blank
Ovation DCSEmersonSwitch for Distributed Control Systemwdpf
Ovation DCSEmersonSwitch for Distributed Control SystemSNMP community string: wdpfRO
Fieldgate FXA520Endress+HauserGateway for remote monitoring and diagnosissuper:super
Fieldgate ViewerEndress+HauserHMI softwareadmin:0000
EMG-10ENTESMODBUS Gatewayemg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-02ENTESMODBUS Gatewayemg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-12ENTESMODBUS Gatewayemg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
DTR-10ENTEStime relay0
MCB-125ENTEStime relay0
MCB-126ENTEStime relay0
MPR-53CSENTESnetwork analyzer0
GEM-05ENTESGPRS/Modbus Gatewaygem10
GEM-10ENTESGPRS/Modbus Gatewaygem10
GEM-10SHENTESGPRS/Modbus Gatewaygem10
ENTBUS PLUSENTESEnergy Management Softwareadmin:1234
EPM-04/04C/04CSENTESMULTIMETER0
MPR-SWENTESMonitoring & Reporting Softwareadmin:
AlleWONRouteradm:adm
USHAFalconUPS SNMP HTTP AGENTUSHA:admin
SymDec 4General Electric Video Streaming RecorderSoftware: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
WebServerGeneral Electric Video Streaming RecorderSoftware: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SymNavGeneral Electric Video Streaming RecorderSoftware: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
CimplicityGeneral Electric Video Streaming RecorderSoftware: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
CIMPLICITY WebViewGeneral Electric Video Streaming RecorderSoftware: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SNMP/Web InterfaceGeneral Electric Digital EnergySNMP/Web InterfaceGE:GE (Telnet, HTTP), public (SNMP community string)
FASTlab SynthesizerGeneral Electric HealthcareSynthesizerAdmin:admin
TRACERlab FX2 devices (model C, MeI and N)General Electric HealthcareSynthesis moduleadmin:tracerlab (physical access required)
TRACERlab FX2 MGeneral Electric HealthcareChemistry Synthesizertracerlab:tracerlab (for remote access), admin:tracerlab
HiSpeed CT/iGeneral Electric HealthcareComputed Tomography Scannerroot:#bigguy, ctuser:4$apps
Lightspeed QX/iGeneral Electric HealthcareComputed Tomography Scannerroot:#bigguy, ctuser:4$apps
Discovery CT590 RTGeneral Electric HealthcareComputed Tomography Scannerroot:#bigguy
Optima CT580 General Electric HealthcareComputed Tomography Scannerroot:#bigguy
Datex-Ohmeda Engstrm VentilatorGeneral Electric HealthcareCarestation Ventilators23-17-21 (Super User), 34-22-14 (service-level)
IC695PNC001General Electric Intelligent PlatformsPROFINET Controlleradmin:system
IC695ECM850General Electric Intelligent PlatformsIEC 61850 Clientadmin:system
IC695ETM001General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC695CPE305General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC695CPE310General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC695CPE330General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698ETM001General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CPE010General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CPE020General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CRE020General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CPE030General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CPE040General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CRE030General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CRE040General Electric Intelligent PlatformsEthernet module/programmable controllersystem
IC698CPE030General Electric Intelligent PlatformsProgrammable controller with built-in web serveruser:system
IC698CPE040General Electric Intelligent PlatformsProgrammable controller with built-in web serveruser:system
IC698CRE030General Electric Intelligent PlatformsProgrammable controller with built-in web serveruser:system
IC698CRE040General Electric Intelligent PlatformsProgrammable controller with built-in web serveruser:system
NetmonitorHeatmisergateway between the outside world and heating systemadmin:admin
NETLink PRO HW 1-1a-1 and FW 1. 54 and higherHelmholz SystemeEthernet Gateway for MPI/PROFIBUSNETLink PRO PoE:admin
RS20HirschmannSwitchuser:public, admin:private
RS30HirschmannSwitchuser:public, admin:private
MICEHirschmannSwitchuser:public, admin:private
RSP 20HirschmannIndustrial routeruser:public, admin:private
RSP 25HirschmannIndustrial routeruser:public, admin:private
RSP 30HirschmannIndustrial routeruser:public, admin:private
RSP 35HirschmannIndustrial routeruser:public, admin:private
MACH 4000 FamilyHirschmannIndustrial routeruser:public, admin:private
MACH 1000 FamilyHirschmannIndustrial routeruser:public, admin:private
MACH 100 FamilyHirschmannIndustrial routeruser:public, admin:private
MACH 4002 FamilyHirschmannIndustrial routeruser:public, admin:private
MACH104 Family Full GigabitHirschmannIndustrial routeruser:public, admin:private
MACH 1040 Family Full GigabitHirschmannIndustrial routeruser:public, admin:private
OCTOPUS 8MHirschmannIndustrial routeruser:public, admin:private
OCTOPUS 16MHirschmannIndustrial routeruser:public, admin:private
OCTOPUS 24MHirschmannIndustrial routeruser:public, admin:private
EAGLE 20HirschmannIndustrial ETHERNET Firewalladmin:private, user:public
EUB-550HitachiUltrasound Diagnostic ScannerService Tools:SERVICETOOL
Web ControllerHitachiControlleradmin:1111
LK SERIES PLCHollySys Automation TechnologiesPLCFTP blank, Telnet blank
Honeywell XLHoneywellControllerGuest:guest, SysAdmin:honey
Alerton BCM-WEBHoneywellBACtalk control module, Web server and Configurator CDpass
NetAXSHoneywellAccess Control Unitadmin:admin
PIKO-Inverter 3.0, 3.6, 4.2, 5.5, 7.0, 8.3, 10.1Kostal Solarsolar inverter, storage systempvserver:pvwr
PIKO BA Storage SystemKostal Solarsolar inverter, storage systempvserver:pvwr
EDS-MD 4LantronixMedical Device Serveradmin:PASS
EDS-MD 8LantronixMedical Device Serveradmin:PASS
EDS-MD 16LantronixMedical Device Serveradmin:PASS
L-DALI DALI Light ControllerLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
L-INX Automation ServerLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
L-GATE Universal GatewayLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
L-IP CEA-709/IP RouterLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
L-VISLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LIOB-10x I/O ModuleLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LIOB-x5x I/O ModuleLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LIP-ME20X L-IP BACnet RouterLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LWEB-802 Building Management SystemLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LWEB-803 Building Management SystemLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
LWEB-900 Building Management SystemLOYTEC ElectronicsMultiple Devicesadmin:loytec4u
L-Proxy CEA-709 GatewayLOYTEC ElectronicsGatewayadmin:admin
NetBeacon Element Management SoftwareMetrobilityHMI Softwareguest:guest, admin:admin, root:root
PLC QnUCPU QnUDVCPUMitsubishiPLCMELSEC:MELSEC
PLC QnUCPU QnUDE(H)CPUMitsubishiPLCQNUDECPU:QNUDECPU
MES3-255C-ENMitsubishiWeb serverecoV:ecopass, guest:user
AirWorks AWK-3131-RCCMoxaIndustrial 802.11n wireless AP/bridge/clientadmin:root
Railway Remote I/O (ioLogik E12xx)MoxaRemote Ethernet I/OHTTP on Port 9020: 1)none:root, 2)none:none
Railway Remote I/O (ioLogik E15xx)MoxaRemote Ethernet I/OHTTP on Port 9020: 1)none:root, 2)none:none
Cellular Micro RTU Controller (ioLogik W53xx, ioLogik)Moxamicro RTU controlleradministrator:blank, Telnet on port 9900 / 9000: root:root
VPort 461 Industrial Video Encoder MoxaIndustrial Video Encoder admin:admin, :
IA240 Embedded computerMoxaEmbedded computers are designed for industrial, automation applicationstelnet root:root, FTP root:blank, PPP root:root, serial console root:root
IA241 Embedded computerMoxaEmbedded computers are designed for industrial, automation applicationstelnet root:root, FTP root:blank, PPP root:root, serial console root:root
OnCell Central ManagerMoxaSoftwareadmin:admin
EDS-505A SeriesMoxaSwitchadmin:
EDS-508A SeriesMoxaSwitchadmin:
OnCell G3100 SeriesMoxaCellular IP GatewaysHTTP admin:admin, HTTP Admin:Keep , PAP admin:
3G21WB (BigPond Firmware)Netcomm WirelessRouteradmin:admin
3G9WB (BigPond Firmware)Netcomm WirelessRouteradmin:admin
N3G001W (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB14WN (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB5 (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB5Plus4 (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB6Plus4 (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB6Plus4W (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NNB7 (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB9WMAXX (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NP804N (Netcomm Firmware)Netcomm WirelessRouteradmin:admin
NB1300 Plus 4 (Netcomm Firmware)Netcomm WirelessRouteradmin:password
NP803N (Netcomm Firmware)Netcomm WirelessRouteradmin:password
SuperViewNOVUS AUTOMATIONSCADAsuperview:superview
AirGate-3GNOVUS AutomationDual SIM Industrial Cellular VPN Routeradmin:admin
N1040NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N480DNOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N960NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1020NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1040iNOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1540NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N2000NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N3000NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N120NOVUS AutomationTemperature Controller1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
Dragon Medical 360 Network EditionNuanceMedical Speech Recognition Software Solutionsadmin:password
NS-Series Programmable Terminals Web Interface (NS12-TS01-V2, NS10-TV01-V2, NS8-TV01-V2, NS5-SQ11-V2, NS5-TQ11-V2 and NS5-MQ11-V2)OmronProgrammable Terminalsdefault:default
CJ1M CPU Units with Ethernet FunctionsOmron IAPLCfor http: ETHERNET, for ftp: CONFIDENTIAL
EH-net serverOumanHMI Softwareadmin:admin
JouleTempPhasefale ControlsPLCadmin:pass
Logic+Phoenix ContactSoftwareadmin:admin
AUTOPLATEPIPS Technologylicense plate recognition system (Telnet), wl_test:wl_test, vesstore:vesstore, ftp_boot:ftp_boot (FTP)
ICX30-HWCProsoft TechnologyIndustrial Cellular Gatewayadmin:password
1756-EN2TSCRockwell Automation / Allen-BradleyEtherNet/IP communication moduleAdministrator:admin
1734-AENTRockwell Automation / Allen-Bradley I/O Adapteradmin:password
1756-EWEBRockwell Automation / Allen-BradleyWeb Server ModuleAdministrator:
1768-EWEBRockwell Automation / Allen-BradleyWeb Server ModuleAdministrator:
9300-RADESRockwell Automation / Allen-BradleyIndustrial ModemHTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM, CHAP/PAP: ppp_user:ZYPCOM
9300-8EDMRockwell Automation / Allen-BradleyIndustrial SwitchHTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM
MicroLogix 1100 Embedded Web ServerRockwell Automation / Allen-BradleyWeb Serverguest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
MicroLogix 1400 Embedded Web ServerRockwell Automation / Allen-BradleyWeb Serverguest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/, PVPlus 6Rockwell Automation / Allen-BradleySCADApassword
TROVIS 5590 Web ModuleSAMSON GROUPWeb ModuleTo read data 1111:1111, To change data 4444:4444
Integrated Management System DMSSamsungData Management Serverroot:rkwjsdusrnth
Integrated Management System S-NET miniSamsungS-NET IMSDMS Connection: 0000 or 1234
PowerLogic Series 800 Power Meter (PM800)Schneider ElectricPower Monitoring Module0
PowerLogic Series 800 Power Meter (PM820SD)Schneider ElectricPower Monitoring Module0
PowerLogic Series 800 Power Meter (PM870SD)Schneider ElectricPower Monitoring Module0
PowerLogic Power MeterSchneider ElectricPower Monitoring Module0
PowerLogic ION7550 Energy and power meterSchneider ElectricEnergy and power meter0
PowerLogic ION7650 Energy and power meterSchneider ElectricEnergy and power meter0
PowerLogic ION8650 Energy and power meterSchneider ElectricEnergy and power meter0
PowerLogic Ethernet Gateway EGX100Schneider ElectricIntegrated gateway-serverAdministrator:Gateway
PowerLogic Ethernet Gateway EGX300Schneider ElectricIntegrated gateway-serverAdministrator:Gateway
PowerLogic EGX200 (with firmware version 5.5 or higher)Schneider Electricgateway-serverAdministrator:admin, User 1:master, User 2:engineer, User 3:operator
PowerLogic EGX400 (with firmware version 5.5 or higher)Schneider Electricgateway-serverAdministrator:admin, User 1:master, User 2:engineer, User 3:operator
Modicon QuantumSchneider ElectricPLCftpuser/password, qbf77101/hexakisoctahedron, USER:USER
Modicon M340Schneider ElectricPLCntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon M340 for EthernetSchneider ElectricPLCntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon PremiumSchneider ElectricPLCFTP: sysdiag:factorycast@schneider, HTTP: USER:USER
PowerLogic PM8000 Power MeterSchneider ElectricPLCPhysical: 0, FTP: 8000:
PowerLogic PM8240 Power MeterSchneider ElectricPLCPhysical: 0, FTP: 8000:
PowerLogic PM8243 Power MeterSchneider ElectricPLCPhysical: 0, FTP: 8000:
PowerLogic PM8244 Power MeterSchneider ElectricPLCPhysical: 0, FTP: 8000:
TSX ETG 1000Schneider ElectricPLCHTTP Server, PAP Protocol: USER:USER, FTP: wsupgrade:wsupgrade, Serial Connection: Administrator:Gateway
ETG100Schneider ElectricPLCAdministrator:Gateway
M258Schneider ElectricPLCadm:adm
Quantum NOE 771 xxSchneider ElectricEthernet Modulespcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
CitectSCADASchneider ElectricEthernet Modulespcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
Simatic S7-300 (pre-2009 versions)SiemensPLCHardcoded password: Basisk:Basisk
Simatic S7-1200SiemensPLCadmin:blank
Simatic S7-1500SiemensPLCadmin:blank
Scalance X-200SiemensIndustrial Ethernet Switchesadmin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-1PROSiemensIndustrial Wireless LAN, Industrial Ethernet Switchesadmin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-2PROSiemensIndustrial Wireless LAN, Industrial Ethernet Switchesadmin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
Synco living Web server OZW772 V2.0SiemensWeb-serverAdministrator:Password
Siemens WinCC 7.xSiemensHMI Softwarewinccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator
Ruggedcom RMC30SiemensIndustrial routeradmin:admin, operator:operator, guest:guest
RUGGEDCOM ROX II for RX1500, RX1501, RX1510, RX1511, RX1512SiemensEthernet Switches Layer 3 / Routersroot:admin (service), admin:admin (administrator), oper:oper (operator), guest:guest (guest)
RuggedSwitch RS8000SiemensIndustrial routeradmin
RuggedSwitch RS1600SiemensIndustrial routeradmin
RuggedSwitch RS900SiemensIndustrial routeradmin
Siemens ST950SiemensIntersection controllerroot:zP2wxY4uE
Siemens ClimatixSiemensPLCLevel 6 End users: 1000 (Physical), Level 4 Service operator: 2000 (Physical), Level 2 OEM: 6000 (Physical), Web: ADMIN:SBTAdmin!
Sicam SGUSiemensRTU642935177
Sicam SGUSiemensRTUadmin@root:charleM!800
SC 7000SiemensPatient Monitors Service4712 (passcode, physical access required)
SC 9000XLSiemensPatient Monitors Service4712 (passcode, physical access required)
AirLinkSierra Wireless3G/4G gatewaysconsole:12345
AirLinkSierra Wireless3G/4G gatewayuser:12345, viewer:12345
eSolarSinapsiWeb-Server for photovoltaic applicationsadmin:admin
Sunny WebBoxSMA Solar TechnologyICS device for data loggingInstaller:sma
Stulz WIB 8000Stulz GmbHPLCAdministrator, highest authorization: ganymed, Medium authorization: kallisto, Lowest authorization: europa
TAC Xenta 500/700/911TAC ABPLCroot:root
TAC Xenta 913TAC ABPLCroot:root
TAC Xenta 511TAC ABPLCroot:root
TAC Xenta 527TAC ABPLCroot:root
Tecomat Foxtrot TecomatPLC0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9)
ATMS.nowTrafficwareAdvanced Traffic Management Systemnaztec:naztec
NiagaraAX (ver 1)TridiumSoftware for JACE-2, JACE-403 or JACE-545tridium:niagara
NiagaraAX (ver 2)TridiumSoftware for JACE-2, JACE-403 or JACE-545tridium:niagara
NiagaraAX (ver 3)TridiumSoftware for JACE-2, JACE-403 or JACE-545tridium:niagara
BL20-E-GW-ENTurckPLCHTTP: password, FTP: (unspecified hardcoded)
BL67-E-GW-ENTurckPLCHTTP: password, FTP: (unspecified hardcoded)
AirControlUbiquitiWeb Management Applicationubnt:ubnt
AirOSUbiquitioperation systemubnt:ubnt
WAGO-I/O-SYSTEM??750WagoController admin:wago, user:user, guest:guest
WAGO-I/O-IPC 758-870/000-xxxWagoCompact Industrial PC?http, ftp:, user:user00 , administrator:, su:ko2003wa
Modular I/O-System Linux Fieldbus Coupler 750-860 WagoPLCroot:wago , admin:wago, user:user , guest:guest
SoftCare Evo Type SE10WashTecRoll-over car wash system00001 (limited access), 00000 (unlimited access)
KingSCADA 3.0WellintechSoftwareadministrator:administrator (role KVAdministrator)
TDW 33WestermoIndustrial Modemno password, just return, Hardcoded password: n3Y9kA6otYZu8, (?? TD-36)
MRD-305-DINWestermoIndustrial routeradmin:westermo
MRD-310WestermoIndustrial routeradmin:westermo
MRD-315WestermoIndustrial routeradmin:westermo
MRD-330WestermoIndustrial routeradmin:westermo
MRD-355WestermoIndustrial routeradmin:westermo
MRD-350WestermoIndustrial routeradmin:westermo
MRD-455WestermoIndustrial routeradmin:westermo
RedFox SeriesWestermoIndustrial routeradmin:westermo
Wolverine SeriesWestermoIndustrial routeradmin:westermo
Lynx SeriesWestermoIndustrial routeradmin:westermo
Falcon SeriesWestermoIndustrial routeradmin:westermo
Viper SeriesWestermoIndustrial routeradmin:westermo
HistorianWonderwareSQL ServerSQL Server Login: aadbo:pwddbo, wwdbo:pwddbo, aaAdmin:pwAdmin, wwAdmin:wwAdmin, aaPower:pwPower, wwPower:wwPower, aaUser:pwUser, wwUser:wwUser
IntouchWonderwareSCADAAdministrator:Wonderware
System Platform/ArchestraWonderwareIntegrated Development Environmentadministrator:blank
442SRXzeressmall wind turbineMyTurbine:m442+SRt
YFGW410 gatewayYokogawaWireless Management Stationadmin:!admin
DX1000YokogawaSoftwareAdministrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX1000NYokogawaSoftwareAdministrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX2000 AdvancedYokogawaSoftwareAdministrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
CENTUM CS 3000 DCSYokogawaDistributed Control SystemCENTUM:CENTUM
EJX910A Multivariable Transmitter HART Communication TypeYokogawaMultivariable transmitterYOKOGAWA. (to release the Write Protect mode),
WT 3000 DriverYokogawaPrecision Power Analyzeranonymous:blank (Ethernet access)
Nightingale PPM3Zoe MedicalVital Sign Monitor With CO2Set Dial 1 to 49, Set Dial 2 to 48, Set Dial 3 to 46


Credits and Thanks