Ecu 1251D08 04
Monthly
Default-credential unauthorized access affects the Advantech ECU-1251D industrial communication gateway, which ships with a root SSH account protected by no password and is documented as such in the device manual. An attacker on the same network segment can log in as root over SSH without any credential, and because configuration provides no prompt or guidance to change these defaults, exploitable devices are likely to persist in the field. No public exploit identified at time of analysis, but the vulnerability requires no exploitation skill - knowledge of the documented default is sufficient.
Default-credential unauthorized access affects the Advantech ECU-1251D industrial communication gateway, which ships with a root SSH account protected by no password and is documented as such in the device manual. An attacker on the same network segment can log in as root over SSH without any credential, and because configuration provides no prompt or guidance to change these defaults, exploitable devices are likely to persist in the field. No public exploit identified at time of analysis, but the vulnerability requires no exploitation skill - knowledge of the documented default is sufficient.