Looking for more data? for more information about CRITIFENCE API, e-mail to api@critifence.com
| AC 800M | ABB | Controller | service:ABB800xA |
| SREA-01 | ABB | Ethernet Adapter Module | admin:admin |
| RTU500 | ABB | Ethernet Adapter Module | admin:admin |
| A850 Telemetry Gateway | Adcon Telemetry | Base Station | root:840sw |
| A850 Telemetry Gateway (ver2) | Adcon Telemetry | Base Station | root:840sw |
| A440 Wireless Modem | Adcon Telemetry | Base Station | root:840sw |
| addVANTAGE Pro 6.1, 6.5 | Adcon Telemetry | HMI | root:root |
| SNMP-1000, MIC-3924 | Advantech | system management module, intelligent chassis management module | advantech:admin |
| Advantech WebAccess browser-based HMI and SCADA software | Advantech | browser-based HMI and SCADA software | admin:blank |
| EKI-7659C | Advantech | industrial switch | admin:admin |
| EKI-7657C | Advantech | industrial switch | admin:admin |
| ADAM-6200 Series | Advantech | Intelligent Ethernet I/O Module | root:00000000 |
| ADAM-6050W | Advantech | I/O module | root:00000000 |
| ADAM-3600-A1F | Advantech | Remote I/O Module | Root:00000000, Admin:00000000, User:00000000 |
| OmniSwitch 6250 | Alcatel-Lucent | switch | admin:switch |
| AT-IE200-6GT (IE200 Series) | Allied Telesis | Industrial Ethernet Switches | manager:friend |
| AT-IE200-6GP (IE200 Series) | Allied Telesis | Industrial Ethernet Switches | manager:friend |
| AT-IE200-6FT (IE200 Series) | Allied Telesis | Industrial Ethernet Switches | manager:friend |
| AT-IE200-6FP (IE200 Series) | Allied Telesis | Industrial Ethernet Switches | manager:friend |
| KVGC202/EN/M/E11 | Alstom | Relays | AAAA |
| MiCOM P141/P142/P143/P342/P343/P344/P345/P346/P391 | Alstom | Relays | AAAA |
| Argus Messenger | Argus | Messenger | ArgusAdmin:masterkey |
| Argus Address Manager | Argus | Address Manager Software | argus:argus |
| ASTUTE140 Meter | Astute Medical | Analyzer | 1234:1234 |
| CR10 v2 | B&B ELECTRONICS | Industrial router | root:root |
| Conel 4.0.1 | B&B ELECTRONICS | Industrial router | root:root |
| SPECTRE Router | B&B ELECTRONICS | Router | root:root |
| ER75i | B&B ELECTRONICS | Industrial router | root:root |
| ER 75i DUO | B&B ELECTRONICS | Industrial router | root:root |
| ER 75i SL | B&B ELECTRONICS | Industrial router | root:root |
| ER75i v2 | B&B ELECTRONICS | Industrial router | root:root |
| LR77 v2 Libratum/LR77 v2 | B&B ELECTRONICS | Industrial router | root:root |
| UR5i v2 | B&B ELECTRONICS | Industrial router | root:root |
| UCR11-v2 | B&B ELECTRONICS | Industrial router | root:root |
| UCR11 v2 SL | B&B ELECTRONICS | Industrial router | root:root |
| XR5i v2E | B&B ELECTRONICS | Industrial router | root:root |
| XR5i v2 | B&B ELECTRONICS | Industrial router | root:root |
| XR5i | B&B ELECTRONICS | Industrial router | root:root |
| XR5i SL | B&B ELECTRONICS | Industrial router | root:root |
| ES1A | B&B ELECTRONICS | Converter | root:dbps |
| Vlinx VESR4x4 | B&B ELECTRONICS | SERIAL SERVER | |
| Vlinx MESR9xx Modbus Gateway | B&B ELECTRONICS | Modbus Gateway | |
| MediCal QAWeb Agent | Barco | Client Application | Advanced:advanced |
| IPC@CHIP | Beck IPC | PLC | PPPSERVER:, ppps:ppps |
| CX5020 | Beckhoff Automation GmbH | PLC | webguest:1 |
| TwinCAT | Beckhoff Automation GmbH | Software for the Windows control and automation technology | Administrator:1 |
| BinTec X1200 II | BinTec Elmeg | Router | admin:bintec, |
| any routers | BinTec Elmeg | Router | (##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin |
| BinTec R230aw | BinTec Elmeg | Router | admin:funkwerk |
| Bintec W2002T-n | BinTec Elmeg | WLAN Access Point for applications in rolling stocks | admin:funkwerk, admin:admin |
| bk3000 | BK Ultrasound | Ultrasound System | administrator:superuser |
| easy/easy compact/easy split | CAREL | Electronic Microprocessor Controllers, plug-in electronic digital thermostat | 22 (access to the parameters) |
| PJ32V/PJ32W/PJ32Z | CAREL | Electronic Microprocessor Controllers, plug-in electronic digital thermostat | 22 (access to the parameters) |
| pCOWeb | CAREL | Communication Card | root:froot, carel:fcarel, guest:fguest, httpadmin:fhttpadmin (ftp), admin:fadmin (http), passwordless accounts via telnet: http::48:48:HTTP users:/usr/http/root:/bin/bash, nobody::99:99:nobody:/var/lib/nobody:/bin/bash |
| ir33 (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| ir33 power (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| ir33 DIN (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| powercompact (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| powercompact small (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| mastercella (ir33 platform) | CAREL | Integrated Electronic Microprocessor Controllers with LED display | 22 (access to the parameters), 66 (download activation password) |
| Universal Infrared Series | CAREL | Pressure, Humidity and Temperature controllers | 22 (enter and modify parameters C0, C13, 15 and 16 in addition to all ???P??? parameters), 77 (enter and modify all parameters) |
| IR33-DN33 Universale series | CAREL | Pressure, Humidity and Temperature controllers | 77 (Setting type c, d, F parameters) |
| pRack PR100 | CAREL | Compressor Rack Controller | user password: 0000, service password: 1234, manufacturer password: 1234 |
| humiSteam x-plus | CAREL | Humidifiers | 77 |
| PlantVisorPRO Locale | CAREL | Plant supervision | admin:admin |
| PlantWatchPRO | CAREL | Supervisor for small-medium installations | PVRemote:PD35010 (from a remote PC via a telephone connection) |
| mC2SE | CAREL | Electronic Controller | Direct level: , user level: 22, super user level: 11, factory level: 66 |
| PowerSoft | Carlo Gavazzi | Modular Software | admin:admin, user:user |
| In-Row M52 Microprocessor | ClimateWorx International | Controller | 1024 (Service level) |
| M52 Microprocessor | ClimateWorx International | Controller | Level 1: 1024, level 2: 4321, level 3: 1234 |
| ClinicPro EMR | ClinicPro | Electronic Medical / Health Records Software | admin:abc123 |
| E-Series EEG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software) | Compumedics | Electroencephalograph Systems,data acquisition systems, HMI software | 0000 (security dialogue password) |
| E-Series EEG/PSG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software) | Compumedics | Electroencephalograph Systems,data acquisition systems, HMI software | 0000 (security dialogue password) |
| BASRT-B | Contemporary Control Systems | Router | admin:admin |
| UR5i | Datasensor | Router | root:root |
| UR5i SL | Datasensor | Router | root:root |
| S/5 Light Monitor | Datex-Ohmeda | Portable vital signs monitor | 16-04-34 |
| AWC 500 | Deif | Advanced Wind turbine Controller | root:deif7800 (administrator), default:1234 (user) |
| DC-ME-01T-S | Digi | Networking Modules | root:dbps |
| Digi Connect SP | Digi | Network Device Server Module | root:dbps |
| Digi Connect Wi-SP | Digi | Network Device Server Module | root:dbps |
| Digi Connect ME | Digi | Network Device Server Module | root:dbps |
| Digi Connect ME 4 MB | Digi | Network Device Server Module | root:dbps |
| Digi Connect Wi-ME | Digi | Network Device Server Module | root:dbps |
| Digi Connect EM | Digi | Network Device Server Module | root:dbps |
| Digi Connect Wi-EM | Digi | Network Device Server Module | root:dbps |
| Digi Connect ES 4/8 SB with Switch | Digi | Concentrator | root:dbps |
| Digi Connect ES 4/8 SB | Digi | Concentrator | root:dbps |
| ConnectPort TS 4x4 | Digi | Terminal Server | root:dbps |
| ConnectPort TS 4x2 | Digi | Terminal Server | root:dbps |
| ConnectPort TS W | Digi | Terminal Server | root:dbps |
| ConnectPort TS 8 | Digi | Terminal Server | root:dbps |
| ConnectPort TS 8 MEI | Digi | Terminal Server | root:dbps |
| ConnectPort TS 16 | Digi | Terminal Server | root:dbps |
| Digi Connect WAN | Digi | Industrial router | root:dbps |
| Digi Connect WAN GPRS | Digi | Industrial router | root:dbps |
| Digi Connect WAN GSM-R | Digi | Industrial router | root:dbps |
| Digi Connect WAN VPN | Digi | Industrial router | root:dbps |
| Digi Connect WAN IA | Digi | Industrial router | root:dbps |
| Digi Connect WAN 3G | Digi | Industrial router | root:dbps |
| Digi Connect WAN 3G IA | Digi | Industrial router | root:dbps |
| Digi Connect WAN 4G | Digi | Industrial router | root:dbps |
| Digi TransPort WR21 | Digi | Industrial router | username:password |
| Digi TransPort WR44 | Digi | Industrial router | username:password |
| Digi CM | Digi | Industrial router | root:dbps |
| DigiOne IAP Serial | Digi | Gateway | root:dbps |
| i.LON SmartServer | Echelon | Programmable Modules | for ftp and lns servers: ilon:ilon |
| i.LON SmartServer | Echelon | Building Energy Management Solution, LonWorks/IP Server, Internet Server | ilon:ilon |
| i.LON SmartServer 2.0 | Echelon | Building Energy Management Solution, LonWorks/IP Server, Internet Server | ilon:ilon |
| i.LON 600 | Echelon | Building Energy Management Solution, LonWorks/IP Server, Internet Server | ilon:ilon |
| i.LON 100e4 | Echelon | Building Energy Management Solution, LonWorks/IP Server, Internet Server | ilon:ilon |
| LumInsight | Echelon | Central Management System | Echelon:echeloncorp |
| Nexus 1500 | Electro Industries/GaugeTech | Power Quality Meter | anonymous:anonymous |
| Nexus 1500+ | Electro Industries/GaugeTech | Power Quality Meter | anonymous:anonymous |
| Communicator EXT 3.0 | Electro Industries/GaugeTech | Power Monitoring Software | eignet:inp100 |
| AMS Suit | Emerson | diagnostic software | admin:, sa:42Emerson42Eme (SQL Server) |
| DeltaV Digital Automation System | Emerson | Automation System | Administrator:deltav |
| Liebert IntelliSlot Web Card | Emerson | Web Card | Liebert:Liebert, User:User |
| Liebert OpenComms Web Card | Emerson | Web Card | Liebert:Liebert |
| Smart Wireless Gateway 1420 | Emerson | Wireless Gateway | admin:default, maint:default, oper:default, exec:default |
| Smart Wireless Navigator | Emerson | stand-alone network infrastructure management tool | for the Windows log in Administrator:navigator, for Smart Wireless Navigator log in Supervisor:Admin, User1:Password1, User2:Password2, User3:Password3 |
| Network Power MPH2 Rack PDU | Emerson | Rack PDUs | admin:admin |
| UL33 UPS | Emerson | UPS | 123456 |
| Control Link Refrigeration System Controller | Emerson | Controller | 0 |
| UltraSite | Emerson | Software | User 01:100, User 05:200, User 09:300, Engineer:400 |
| Avocent ACS 6000 Advanced Console Server | Emerson | Console Server | admin:avocent, root:linux |
| ROCLINK 800 | Emerson | Software | LOI:1000 |
| ControlWave Micro Quick | Emerson | PLC | for download project:, SYSTEM:666666 |
| IP-KVM Avocent MergePoint Unity | Emerson | Switch | Admin:blank |
| Ovation DCS | Emerson | Switch for Distributed Control System | wdpf |
| Ovation DCS | Emerson | Switch for Distributed Control System | SNMP community string: wdpfRO |
| Fieldgate FXA520 | Endress+Hauser | Gateway for remote monitoring and diagnosis | super:super |
| Fieldgate Viewer | Endress+Hauser | HMI software | admin:0000 |
| EMG-10 | ENTES | MODBUS Gateway | emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02) |
| EMG-02 | ENTES | MODBUS Gateway | emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02) |
| EMG-12 | ENTES | MODBUS Gateway | emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02) |
| DTR-10 | ENTES | time relay | 0 |
| MCB-125 | ENTES | time relay | 0 |
| MCB-126 | ENTES | time relay | 0 |
| MPR-53CS | ENTES | network analyzer | 0 |
| GEM-05 | ENTES | GPRS/Modbus Gateway | gem10 |
| GEM-10 | ENTES | GPRS/Modbus Gateway | gem10 |
| GEM-10SH | ENTES | GPRS/Modbus Gateway | gem10 |
| ENTBUS PLUS | ENTES | Energy Management Software | admin:1234 |
| EPM-04/04C/04CS | ENTES | MULTIMETER | 0 |
| MPR-SW | ENTES | Monitoring & Reporting Software | admin: |
| All | eWON | Router | adm:adm |
| USHA | Falcon | UPS SNMP HTTP AGENT | USHA:admin |
| SymDec 4 | General Electric | Video Streaming Recorder | Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password) |
| WebServer | General Electric | Video Streaming Recorder | Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password) |
| SymNav | General Electric | Video Streaming Recorder | Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password) |
| Cimplicity | General Electric | Video Streaming Recorder | Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password) |
| CIMPLICITY WebView | General Electric | Video Streaming Recorder | Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password) |
| SNMP/Web Interface | General Electric Digital Energy | SNMP/Web Interface | GE:GE (Telnet, HTTP), public (SNMP community string) |
| FASTlab Synthesizer | General Electric Healthcare | Synthesizer | Admin:admin |
| TRACERlab FX2 devices (model C, MeI and N) | General Electric Healthcare | Synthesis module | admin:tracerlab (physical access required) |
| TRACERlab FX2 M | General Electric Healthcare | Chemistry Synthesizer | tracerlab:tracerlab (for remote access), admin:tracerlab |
| HiSpeed CT/i | General Electric Healthcare | Computed Tomography Scanner | root:#bigguy, ctuser:4$apps |
| Lightspeed QX/i | General Electric Healthcare | Computed Tomography Scanner | root:#bigguy, ctuser:4$apps |
| Discovery CT590 RT | General Electric Healthcare | Computed Tomography Scanner | root:#bigguy |
| Optima CT580 | General Electric Healthcare | Computed Tomography Scanner | root:#bigguy |
| Datex-Ohmeda Engstrm Ventilator | General Electric Healthcare | Carestation Ventilators | 23-17-21 (Super User), 34-22-14 (service-level) |
| IC695PNC001 | General Electric Intelligent Platforms | PROFINET Controller | admin:system |
| IC695ECM850 | General Electric Intelligent Platforms | IEC 61850 Client | admin:system |
| IC695ETM001 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC695CPE305 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC695CPE310 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC695CPE330 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698ETM001 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CPE010 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CPE020 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CRE020 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CPE030 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CPE040 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CRE030 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CRE040 | General Electric Intelligent Platforms | Ethernet module/programmable controller | system |
| IC698CPE030 | General Electric Intelligent Platforms | Programmable controller with built-in web server | user:system |
| IC698CPE040 | General Electric Intelligent Platforms | Programmable controller with built-in web server | user:system |
| IC698CRE030 | General Electric Intelligent Platforms | Programmable controller with built-in web server | user:system |
| IC698CRE040 | General Electric Intelligent Platforms | Programmable controller with built-in web server | user:system |
| Netmonitor | Heatmiser | gateway between the outside world and heating system | admin:admin |
| NETLink PRO HW 1-1a-1 and FW 1. 54 and higher | Helmholz Systeme | Ethernet Gateway for MPI/PROFIBUS | NETLink PRO PoE:admin |
| RS20 | Hirschmann | Switch | user:public, admin:private |
| RS30 | Hirschmann | Switch | user:public, admin:private |
| MICE | Hirschmann | Switch | user:public, admin:private |
| RSP 20 | Hirschmann | Industrial router | user:public, admin:private |
| RSP 25 | Hirschmann | Industrial router | user:public, admin:private |
| RSP 30 | Hirschmann | Industrial router | user:public, admin:private |
| RSP 35 | Hirschmann | Industrial router | user:public, admin:private |
| MACH 4000 Family | Hirschmann | Industrial router | user:public, admin:private |
| MACH 1000 Family | Hirschmann | Industrial router | user:public, admin:private |
| MACH 100 Family | Hirschmann | Industrial router | user:public, admin:private |
| MACH 4002 Family | Hirschmann | Industrial router | user:public, admin:private |
| MACH104 Family Full Gigabit | Hirschmann | Industrial router | user:public, admin:private |
| MACH 1040 Family Full Gigabit | Hirschmann | Industrial router | user:public, admin:private |
| OCTOPUS 8M | Hirschmann | Industrial router | user:public, admin:private |
| OCTOPUS 16M | Hirschmann | Industrial router | user:public, admin:private |
| OCTOPUS 24M | Hirschmann | Industrial router | user:public, admin:private |
| EAGLE 20 | Hirschmann | Industrial ETHERNET Firewall | admin:private, user:public |
| EUB-550 | Hitachi | Ultrasound Diagnostic Scanner | Service Tools:SERVICETOOL |
| Web Controller | Hitachi | Controller | admin:1111 |
| LK SERIES PLC | HollySys Automation Technologies | PLC | FTP blank, Telnet blank |
| Honeywell XL | Honeywell | Controller | Guest:guest, SysAdmin:honey |
| Alerton BCM-WEB | Honeywell | BACtalk control module, Web server and Configurator CD | pass |
| NetAXS | Honeywell | Access Control Unit | admin:admin |
| PIKO-Inverter 3.0, 3.6, 4.2, 5.5, 7.0, 8.3, 10.1 | Kostal Solar | solar inverter, storage system | pvserver:pvwr |
| PIKO BA Storage System | Kostal Solar | solar inverter, storage system | pvserver:pvwr |
| EDS-MD 4 | Lantronix | Medical Device Server | admin:PASS |
| EDS-MD 8 | Lantronix | Medical Device Server | admin:PASS |
| EDS-MD 16 | Lantronix | Medical Device Server | admin:PASS |
| L-DALI DALI Light Controller | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| L-INX Automation Server | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| L-GATE Universal Gateway | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| L-IP CEA-709/IP Router | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| L-VIS | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LIOB-10x I/O Module | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LIOB-x5x I/O Module | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LIP-ME20X L-IP BACnet Router | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LWEB-802 Building Management System | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LWEB-803 Building Management System | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| LWEB-900 Building Management System | LOYTEC Electronics | Multiple Devices | admin:loytec4u |
| L-Proxy CEA-709 Gateway | LOYTEC Electronics | Gateway | admin:admin |
| NetBeacon Element Management Software | Metrobility | HMI Software | guest:guest, admin:admin, root:root |
| PLC QnUCPU QnUDVCPU | Mitsubishi | PLC | MELSEC:MELSEC |
| PLC QnUCPU QnUDE(H)CPU | Mitsubishi | PLC | QNUDECPU:QNUDECPU |
| MES3-255C-EN | Mitsubishi | Web server | ecoV:ecopass, guest:user |
| AirWorks AWK-3131-RCC | Moxa | Industrial 802.11n wireless AP/bridge/client | admin:root |
| Railway Remote I/O (ioLogik E12xx) | Moxa | Remote Ethernet I/O | HTTP on Port 9020: 1)none:root, 2)none:none |
| Railway Remote I/O (ioLogik E15xx) | Moxa | Remote Ethernet I/O | HTTP on Port 9020: 1)none:root, 2)none:none |
| Cellular Micro RTU Controller (ioLogik W53xx, ioLogik) | Moxa | micro RTU controller | administrator:blank, Telnet on port 9900 / 9000: root:root |
| VPort 461 Industrial Video Encoder | Moxa | Industrial Video Encoder | admin:admin, : |
| IA240 Embedded computer | Moxa | Embedded computers are designed for industrial, automation applications | telnet root:root, FTP root:blank, PPP root:root, serial console root:root |
| IA241 Embedded computer | Moxa | Embedded computers are designed for industrial, automation applications | telnet root:root, FTP root:blank, PPP root:root, serial console root:root |
| OnCell Central Manager | Moxa | Software | admin:admin |
| EDS-505A Series | Moxa | Switch | admin: |
| EDS-508A Series | Moxa | Switch | admin: |
| OnCell G3100 Series | Moxa | Cellular IP Gateways | HTTP admin:admin, HTTP Admin:Keep , PAP admin: |
| 3G21WB (BigPond Firmware) | Netcomm Wireless | Router | admin:admin |
| 3G9WB (BigPond Firmware) | Netcomm Wireless | Router | admin:admin |
| N3G001W (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB14WN (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB5 (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB5Plus4 (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB6Plus4 (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB6Plus4W (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NNB7 (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB9WMAXX (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NP804N (Netcomm Firmware) | Netcomm Wireless | Router | admin:admin |
| NB1300 Plus 4 (Netcomm Firmware) | Netcomm Wireless | Router | admin:password |
| NP803N (Netcomm Firmware) | Netcomm Wireless | Router | admin:password |
| SuperView | NOVUS AUTOMATION | SCADA | superview:superview |
| AirGate-3G | NOVUS Automation | Dual SIM Industrial Cellular VPN Router | admin:admin |
| N1040 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N480D | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N960 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N1020 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N1040i | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N1540 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N2000 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N3000 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| N120 | NOVUS Automation | Temperature Controller | 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD) |
| Dragon Medical 360 Network Edition | Nuance | Medical Speech Recognition Software Solutions | admin:password |
| NS-Series Programmable Terminals Web Interface (NS12-TS01-V2, NS10-TV01-V2, NS8-TV01-V2, NS5-SQ11-V2, NS5-TQ11-V2 and NS5-MQ11-V2) | Omron | Programmable Terminals | default:default |
| CJ1M CPU Units with Ethernet Functions | Omron IA | PLC | for http: ETHERNET, for ftp: CONFIDENTIAL |
| EH-net server | Ouman | HMI Software | admin:admin |
| JouleTemp | Phasefale Controls | PLC | admin:pass |
| Logic+ | Phoenix Contact | Software | admin:admin |
| AUTOPLATE | PIPS Technology | license plate recognition system | (Telnet), wl_test:wl_test, vesstore:vesstore, ftp_boot:ftp_boot (FTP) |
| ICX30-HWC | Prosoft Technology | Industrial Cellular Gateway | admin:password |
| 1756-EN2TSC | Rockwell Automation / Allen-Bradley | EtherNet/IP communication module | Administrator:admin |
| 1734-AENT | Rockwell Automation / Allen-Bradley | I/O Adapter | admin:password |
| 1756-EWEB | Rockwell Automation / Allen-Bradley | Web Server Module | Administrator: |
| 1768-EWEB | Rockwell Automation / Allen-Bradley | Web Server Module | Administrator: |
| 9300-RADES | Rockwell Automation / Allen-Bradley | Industrial Modem | HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM, CHAP/PAP: ppp_user:ZYPCOM |
| 9300-8EDM | Rockwell Automation / Allen-Bradley | Industrial Switch | HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM |
| MicroLogix 1100 Embedded Web Server | Rockwell Automation / Allen-Bradley | Web Server | guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100) |
| MicroLogix 1400 Embedded Web Server | Rockwell Automation / Allen-Bradley | Web Server | guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100) |
| PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/, PVPlus 6 | Rockwell Automation / Allen-Bradley | SCADA | password |
| TROVIS 5590 Web Module | SAMSON GROUP | Web Module | To read data 1111:1111, To change data 4444:4444 |
| Integrated Management System DMS | Samsung | Data Management Server | root:rkwjsdusrnth |
| Integrated Management System S-NET mini | Samsung | S-NET IMS | DMS Connection: 0000 or 1234 |
| PowerLogic Series 800 Power Meter (PM800) | Schneider Electric | Power Monitoring Module | 0 |
| PowerLogic Series 800 Power Meter (PM820SD) | Schneider Electric | Power Monitoring Module | 0 |
| PowerLogic Series 800 Power Meter (PM870SD) | Schneider Electric | Power Monitoring Module | 0 |
| PowerLogic Power Meter | Schneider Electric | Power Monitoring Module | 0 |
| PowerLogic ION7550 Energy and power meter | Schneider Electric | Energy and power meter | 0 |
| PowerLogic ION7650 Energy and power meter | Schneider Electric | Energy and power meter | 0 |
| PowerLogic ION8650 Energy and power meter | Schneider Electric | Energy and power meter | 0 |
| PowerLogic Ethernet Gateway EGX100 | Schneider Electric | Integrated gateway-server | Administrator:Gateway |
| PowerLogic Ethernet Gateway EGX300 | Schneider Electric | Integrated gateway-server | Administrator:Gateway |
| PowerLogic EGX200 (with firmware version 5.5 or higher) | Schneider Electric | gateway-server | Administrator:admin, User 1:master, User 2:engineer, User 3:operator |
| PowerLogic EGX400 (with firmware version 5.5 or higher) | Schneider Electric | gateway-server | Administrator:admin, User 1:master, User 2:engineer, User 3:operator |
| Modicon Quantum | Schneider Electric | PLC | ftpuser/password, qbf77101/hexakisoctahedron, USER:USER |
| Modicon M340 | Schneider Electric | PLC | ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP) |
| Modicon M340 for Ethernet | Schneider Electric | PLC | ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP) |
| Modicon Premium | Schneider Electric | PLC | FTP: sysdiag:factorycast@schneider, HTTP: USER:USER |
| PowerLogic PM8000 Power Meter | Schneider Electric | PLC | Physical: 0, FTP: 8000: |
| PowerLogic PM8240 Power Meter | Schneider Electric | PLC | Physical: 0, FTP: 8000: |
| PowerLogic PM8243 Power Meter | Schneider Electric | PLC | Physical: 0, FTP: 8000: |
| PowerLogic PM8244 Power Meter | Schneider Electric | PLC | Physical: 0, FTP: 8000: |
| TSX ETG 1000 | Schneider Electric | PLC | HTTP Server, PAP Protocol: USER:USER, FTP: wsupgrade:wsupgrade, Serial Connection: Administrator:Gateway |
| ETG100 | Schneider Electric | PLC | Administrator:Gateway |
| M258 | Schneider Electric | PLC | adm:adm |
| Quantum NOE 771 xx | Schneider Electric | Ethernet Modules | pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP) |
| CitectSCADA | Schneider Electric | Ethernet Modules | pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP) |
| Simatic S7-300 (pre-2009 versions) | Siemens | PLC | Hardcoded password: Basisk:Basisk |
| Simatic S7-1200 | Siemens | PLC | admin:blank |
| Simatic S7-1500 | Siemens | PLC | admin:blank |
| Scalance X-200 | Siemens | Industrial Ethernet Switches | admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP) |
| W788-1PRO | Siemens | Industrial Wireless LAN, Industrial Ethernet Switches | admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP) |
| W788-2PRO | Siemens | Industrial Wireless LAN, Industrial Ethernet Switches | admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP) |
| Synco living Web server OZW772 V2.0 | Siemens | Web-server | Administrator:Password |
| Siemens WinCC 7.x | Siemens | HMI Software | winccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator |
| Ruggedcom RMC30 | Siemens | Industrial router | admin:admin, operator:operator, guest:guest |
| RUGGEDCOM ROX II for RX1500, RX1501, RX1510, RX1511, RX1512 | Siemens | Ethernet Switches Layer 3 / Routers | root:admin (service), admin:admin (administrator), oper:oper (operator), guest:guest (guest) |
| RuggedSwitch RS8000 | Siemens | Industrial router | admin |
| RuggedSwitch RS1600 | Siemens | Industrial router | admin |
| RuggedSwitch RS900 | Siemens | Industrial router | admin |
| Siemens ST950 | Siemens | Intersection controller | root:zP2wxY4uE |
| Siemens Climatix | Siemens | PLC | Level 6 End users: 1000 (Physical), Level 4 Service operator: 2000 (Physical), Level 2 OEM: 6000 (Physical), Web: ADMIN:SBTAdmin! |
| Sicam SGU | Siemens | RTU | 642935177 |
| Sicam SGU | Siemens | RTU | admin@root:charleM!800 |
| SC 7000 | Siemens | Patient Monitors Service | 4712 (passcode, physical access required) |
| SC 9000XL | Siemens | Patient Monitors Service | 4712 (passcode, physical access required) |
| AirLink | Sierra Wireless | 3G/4G gateway | sconsole:12345 |
| AirLink | Sierra Wireless | 3G/4G gateway | user:12345, viewer:12345 |
| eSolar | Sinapsi | Web-Server for photovoltaic applications | admin:admin |
| Sunny WebBox | SMA Solar Technology | ICS device for data logging | Installer:sma |
| Stulz WIB 8000 | Stulz GmbH | PLC | Administrator, highest authorization: ganymed, Medium authorization: kallisto, Lowest authorization: europa |
| TAC Xenta 500/700/911 | TAC AB | PLC | root:root |
| TAC Xenta 913 | TAC AB | PLC | root:root |
| TAC Xenta 511 | TAC AB | PLC | root:root |
| TAC Xenta 527 | TAC AB | PLC | root:root |
| Tecomat Foxtrot | Tecomat | PLC | 0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9) |
| ATMS.now | Trafficware | Advanced Traffic Management System | naztec:naztec |
| NiagaraAX (ver 1) | Tridium | Software for JACE-2, JACE-403 or JACE-545 | tridium:niagara |
| NiagaraAX (ver 2) | Tridium | Software for JACE-2, JACE-403 or JACE-545 | tridium:niagara |
| NiagaraAX (ver 3) | Tridium | Software for JACE-2, JACE-403 or JACE-545 | tridium:niagara |
| BL20-E-GW-EN | Turck | PLC | HTTP: password, FTP: (unspecified hardcoded) |
| BL67-E-GW-EN | Turck | PLC | HTTP: password, FTP: (unspecified hardcoded) |
| AirControl | Ubiquiti | Web Management Application | ubnt:ubnt |
| AirOS | Ubiquiti | operation system | ubnt:ubnt |
| WAGO-I/O-SYSTEM??750 | Wago | Controller | admin:wago, user:user, guest:guest |
| WAGO-I/O-IPC 758-870/000-xxx | Wago | Compact Industrial PC? | http, ftp:, user:user00 , administrator:, su:ko2003wa |
| Modular I/O-System Linux Fieldbus Coupler 750-860 | Wago | PLC | root:wago , admin:wago, user:user , guest:guest |
| SoftCare Evo Type SE10 | WashTec | Roll-over car wash system | 00001 (limited access), 00000 (unlimited access) |
| KingSCADA 3.0 | Wellintech | Software | administrator:administrator (role KVAdministrator) |
| TDW 33 | Westermo | Industrial Modem | no password, just return, Hardcoded password: n3Y9kA6otYZu8, (?? TD-36) |
| MRD-305-DIN | Westermo | Industrial router | admin:westermo |
| MRD-310 | Westermo | Industrial router | admin:westermo |
| MRD-315 | Westermo | Industrial router | admin:westermo |
| MRD-330 | Westermo | Industrial router | admin:westermo |
| MRD-355 | Westermo | Industrial router | admin:westermo |
| MRD-350 | Westermo | Industrial router | admin:westermo |
| MRD-455 | Westermo | Industrial router | admin:westermo |
| RedFox Series | Westermo | Industrial router | admin:westermo |
| Wolverine Series | Westermo | Industrial router | admin:westermo |
| Lynx Series | Westermo | Industrial router | admin:westermo |
| Falcon Series | Westermo | Industrial router | admin:westermo |
| Viper Series | Westermo | Industrial router | admin:westermo |
| Historian | Wonderware | SQL Server | SQL Server Login: aadbo:pwddbo, wwdbo:pwddbo, aaAdmin:pwAdmin, wwAdmin:wwAdmin, aaPower:pwPower, wwPower:wwPower, aaUser:pwUser, wwUser:wwUser |
| Intouch | Wonderware | SCADA | Administrator:Wonderware |
| System Platform/Archestra | Wonderware | Integrated Development Environment | administrator:blank |
| 442SR | Xzeres | small wind turbine | MyTurbine:m442+SRt |
| YFGW410 gateway | Yokogawa | Wireless Management Station | admin:!admin |
| DX1000 | Yokogawa | Software | Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90 |
| DX1000N | Yokogawa | Software | Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90 |
| DX2000 Advanced | Yokogawa | Software | Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90 |
| CENTUM CS 3000 DCS | Yokogawa | Distributed Control System | CENTUM:CENTUM |
| EJX910A Multivariable Transmitter HART Communication Type | Yokogawa | Multivariable transmitter | YOKOGAWA. (to release the Write Protect mode), |
| WT 3000 Driver | Yokogawa | Precision Power Analyzer | anonymous:blank (Ethernet access) |
| Nightingale PPM3 | Zoe Medical | Vital Sign Monitor With CO2 | Set Dial 1 to 49, Set Dial 2 to 48, Set Dial 3 to 46 |
