SCADA/ICS Default Password List

Product Vendor Type Username:Password
AC 800M ABB Controller service:ABB800xA
SREA-01 ABB Ethernet Adapter Module admin:admin
RTU500 ABB Ethernet Adapter Module admin:admin
netCADOPS Web Application ABB Software 0
Ellipse ABB Software 0
ATI Emergency Mass Notification Systems Acoustic Technology, Inc. (ATI Systems) Software 0
A850 Telemetry Gateway Adcon Telemetry Base Station root:840sw
A850 Telemetry Gateway (ver2) Adcon Telemetry Base Station root:840sw
A440 Wireless Modem Adcon Telemetry Base Station root:840sw
addVANTAGE Pro 6.1, 6.5 Adcon Telemetry HMI root:root
SNMP-1000, MIC-3924 Advantech system management module, intelligent chassis management module advantech:admin
Advantech WebAccess browser-based HMI and SCADA software Advantech browser-based HMI and SCADA software admin:blank
EKI-7659C Advantech industrial switch admin:admin
EKI-7657C Advantech industrial switch admin:admin
ADAM-6200 Series Advantech Intelligent Ethernet I/O Module root:00000000
ADAM-6050W Advantech I/O module root:00000000
ADAM-3600-A1F Advantech Remote I/O Module Root:00000000, Admin:00000000, User:00000000
OmniSwitch 6250 Alcatel-Lucent switch admin:switch
AT-IE200-6GT (IE200 Series) Allied Telesis Industrial Ethernet Switches manager:friend
AT-IE200-6GP (IE200 Series) Allied Telesis Industrial Ethernet Switches manager:friend
AT-IE200-6FT (IE200 Series) Allied Telesis Industrial Ethernet Switches manager:friend
AT-IE200-6FP (IE200 Series) Allied Telesis Industrial Ethernet Switches manager:friend
KVGC202/EN/M/E11 Alstom Relays AAAA
MiCOM P141/P142/P143/P342/P343/P344/P345/P346/P391 Alstom Relays AAAA
Argus Messenger Argus Messenger ArgusAdmin:masterkey
Argus Address Manager Argus Address Manager Software argus:argus
ASTUTE140 Meter Astute Medical Analyzer 1234:1234
CR10 v2 B&B ELECTRONICS Industrial router root:root
Conel 4.0.1 B&B ELECTRONICS Industrial router root:root
SPECTRE Router B&B ELECTRONICS Router root:root
ER75i B&B ELECTRONICS Industrial router root:root
ER 75i DUO B&B ELECTRONICS Industrial router root:root
ER 75i SL B&B ELECTRONICS Industrial router root:root
ER75i v2 B&B ELECTRONICS Industrial router root:root
LR77 v2 Libratum/LR77 v2 B&B ELECTRONICS Industrial router root:root
UR5i v2 B&B ELECTRONICS Industrial router root:root
UCR11-v2 B&B ELECTRONICS Industrial router root:root
UCR11 v2 SL B&B ELECTRONICS Industrial router root:root
XR5i v2E B&B ELECTRONICS Industrial router root:root
XR5i v2 B&B ELECTRONICS Industrial router root:root
XR5i B&B ELECTRONICS Industrial router root:root
XR5i SL B&B ELECTRONICS Industrial router root:root
ES1A B&B ELECTRONICS Converter root:dbps
Vlinx VESR4x4 B&B ELECTRONICS SERIAL SERVER
Vlinx MESR9xx Modbus Gateway B&B ELECTRONICS Modbus Gateway
MediCal QAWeb Agent Barco Client Application Advanced:advanced
IPC@CHIP Beck IPC PLC PPPSERVER:, ppps:ppps
CX5020 Beckhoff Automation GmbH PLC webguest:1
TwinCAT Beckhoff Automation GmbH Software for the Windows control and automation technology Administrator:1
BinTec X1200 II BinTec Elmeg Router admin:bintec,
any routers BinTec Elmeg Router (##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin
BinTec R230aw BinTec Elmeg Router admin:funkwerk
Bintec W2002T-n BinTec Elmeg WLAN Access Point for applications in rolling stocks admin:funkwerk, admin:admin
bk3000 BK Ultrasound Ultrasound System administrator:superuser
easy/easy compact/easy split CAREL Electronic Microprocessor Controllers, plug-in electronic digital thermostat 22 (access to the parameters)
PJ32V/PJ32W/PJ32Z CAREL Electronic Microprocessor Controllers, plug-in electronic digital thermostat 22 (access to the parameters)
pCOWeb CAREL Communication Card root:froot, carel:fcarel, guest:fguest, httpadmin:fhttpadmin (ftp), admin:fadmin (http), passwordless accounts via telnet: http::48:48:HTTP users:/usr/http/root:/bin/bash, nobody::99:99:nobody:/var/lib/nobody:/bin/bash
ir33 (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
ir33 power (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
ir33 DIN (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
powercompact (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
powercompact small (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
mastercella (ir33 platform) CAREL Integrated Electronic Microprocessor Controllers with LED display 22 (access to the parameters), 66 (download activation password)
Universal Infrared Series CAREL Pressure, Humidity and Temperature controllers 22 (enter and modify parameters C0, C13, 15 and 16 in addition to all ???P??? parameters), 77 (enter and modify all parameters)
IR33-DN33 Universale series CAREL Pressure, Humidity and Temperature controllers 77 (Setting type c, d, F parameters)
pRack PR100 CAREL Compressor Rack Controller user password: 0000, service password: 1234, manufacturer password: 1234
humiSteam x-plus CAREL Humidifiers 77
PlantVisorPRO Locale CAREL Plant supervision admin:admin
PlantWatchPRO CAREL Supervisor for small-medium installations PVRemote:PD35010 (from a remote PC via a telephone connection)
mC2SE CAREL Electronic Controller Direct level: , user level: 22, super user level: 11, factory level: 66
PowerSoft Carlo Gavazzi Modular Software admin:admin, user:user
In-Row M52 Microprocessor ClimateWorx International Controller 1024 (Service level)
M52 Microprocessor ClimateWorx International Controller Level 1: 1024, level 2: 4321, level 3: 1234
ClinicPro EMR ClinicPro Electronic Medical / Health Records Software admin:abc123
E-Series EEG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software) Compumedics Electroencephalograph Systems,data acquisition systems, HMI software 0000 (security dialogue password)
E-Series EEG/PSG (Siesta and Safiro data acquisition systems and the ProFusion EEG data acquisitionand analysis software) Compumedics Electroencephalograph Systems,data acquisition systems, HMI software 0000 (security dialogue password)
BASRT-B Contemporary Control Systems Router admin:admin
UR5i Datasensor Router root:root
UR5i SL Datasensor Router root:root
S/5 Light Monitor Datex-Ohmeda Portable vital signs monitor 16/04/1934
AWC 500 Deif Advanced Wind turbine Controller root:deif7800 (administrator), default:1234 (user)
Delta Industrial Automation DOPSoft Delta Electronics Software 0
Delta Industrial Automation Screen Editor Delta Electronics Software 0
DC-ME-01T-S Digi Networking Modules root:dbps
Digi Connect SP Digi Network Device Server Module root:dbps
Digi Connect Wi-SP Digi Network Device Server Module root:dbps
Digi Connect ME Digi Network Device Server Module root:dbps
Digi Connect ME 4 MB Digi Network Device Server Module root:dbps
Digi Connect Wi-ME Digi Network Device Server Module root:dbps
Digi Connect EM Digi Network Device Server Module root:dbps
Digi Connect Wi-EM Digi Network Device Server Module root:dbps
Digi Connect ES 4/8 SB with Switch Digi Concentrator root:dbps
Digi Connect ES 4/8 SB Digi Concentrator root:dbps
ConnectPort TS 4x4 Digi Terminal Server root:dbps
ConnectPort TS 4x2 Digi Terminal Server root:dbps
ConnectPort TS W Digi Terminal Server root:dbps
ConnectPort TS 8 Digi Terminal Server root:dbps
ConnectPort TS 8 MEI Digi Terminal Server root:dbps
ConnectPort TS 16 Digi Terminal Server root:dbps
Digi Connect WAN Digi Industrial router root:dbps
Digi Connect WAN GPRS Digi Industrial router root:dbps
Digi Connect WAN GSM-R Digi Industrial router root:dbps
Digi Connect WAN VPN Digi Industrial router root:dbps
Digi Connect WAN IA Digi Industrial router root:dbps
Digi Connect WAN 3G Digi Industrial router root:dbps
Digi Connect WAN 3G IA Digi Industrial router root:dbps
Digi Connect WAN 4G Digi Industrial router root:dbps
Digi TransPort WR21 Digi Industrial router username:password
Digi TransPort WR44 Digi Industrial router username:password
Digi CM Digi Industrial router root:dbps
DigiOne IAP Serial Digi Gateway root:dbps
i.LON SmartServer Echelon Programmable Modules for ftp and lns servers: ilon:ilon
i.LON SmartServer Echelon Building Energy Management Solution, LonWorks/IP Server, Internet Server ilon:ilon
i.LON SmartServer 2.0 Echelon Building Energy Management Solution, LonWorks/IP Server, Internet Server ilon:ilon
i.LON 600 Echelon Building Energy Management Solution, LonWorks/IP Server, Internet Server ilon:ilon
i.LON 100e4 Echelon Building Energy Management Solution, LonWorks/IP Server, Internet Server ilon:ilon
LumInsight Echelon Central Management System Echelon:echeloncorp
Nexus 1500 Electro Industries/GaugeTech Power Quality Meter anonymous:anonymous
Nexus 1500+ Electro Industries/GaugeTech Power Quality Meter anonymous:anonymous
Communicator EXT 3.0 Electro Industries/GaugeTech Power Monitoring Software eignet:inp100
AMS Suit Emerson diagnostic software admin: , sa:42Emerson42Eme (SQL Server)
DeltaV Digital Automation System Emerson Automation System Administrator:deltav
Liebert IntelliSlot Web Card Emerson Web Card Liebert:Liebert, User:User
Liebert OpenComms Web Card Emerson Web Card Liebert:Liebert
Smart Wireless Gateway 1420 Emerson Wireless Gateway admin:default, maint:default, oper:default, exec:default
Smart Wireless Navigator Emerson stand-alone network infrastructure management tool for the Windows log in Administrator:navigator, for Smart Wireless Navigator log in Supervisor:Admin, User1:Password1, User2:Password2, User3:Password3
Network Power MPH2 Rack PDU Emerson Rack PDUs admin:admin
UL33 UPS Emerson UPS 123456
Control Link Refrigeration System Controller Emerson Controller 0
UltraSite Emerson Software User 01:100, User 05:200, User 09:300, Engineer:400
Avocent ACS 6000 Advanced Console Server Emerson Console Server admin:avocent, root:linux
ROCLINK 800 Emerson Software LOI:1000
ControlWave Micro Quick Emerson PLC for download project:, SYSTEM:666666
IP-KVM Avocent MergePoint Unity Emerson Switch Admin:blank
Ovation DCS Emerson Switch for Distributed Control System wdpf
Ovation DCS Emerson Switch for Distributed Control System SNMP community string: wdpfRO
ControlWave Micro Process Automation Controller Emerson PLC 0
Fieldgate FXA520 Endress+Hauser Gateway for remote monitoring and diagnosis super:super
Fieldgate Viewer Endress+Hauser HMI software admin:0000
EMG-10 ENTES MODBUS Gateway emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-02 ENTES MODBUS Gateway emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
EMG-12 ENTES MODBUS Gateway emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)
DTR-10 ENTES time relay 0
MCB-125 ENTES time relay 0
MCB-126 ENTES time relay 0
MPR-53CS ENTES network analyzer 0
GEM-05 ENTES GPRS/Modbus Gateway gem10
GEM-10 ENTES GPRS/Modbus Gateway gem10
GEM-10SH ENTES GPRS/Modbus Gateway gem10
ENTBUS PLUS ENTES Energy Management Software admin:1234
EPM-04/04C/04CS ENTES MULTIMETER 0
MPR-SW ENTES Monitoring & Reporting Software admin:
All eWON Router adm:adm
USHA Falcon UPS SNMP HTTP AGENT USHA:admin
V-Server VPR Fuji Electric Software 0
D60 Line Distance Relay GE RTU 0
Sentinel License Manager Gemalto Software 0
SymDec 4 General Electric Video Streaming Recorder Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
WebServer General Electric Video Streaming Recorder Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SymNav General Electric Video Streaming Recorder Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
Cimplicity General Electric Video Streaming Recorder Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
CIMPLICITY WebView General Electric Video Streaming Recorder Software: admin:admin, 12345 (Log In Password), Hardware: 0000 (Advanced Menu Password), 8111 (Factory Password), 1111 (Ethernet Access Reset Password), 2222 (DDNS Password)
SNMP/Web Interface General Electric Digital Energy SNMP/Web Interface GE:GE (Telnet, HTTP), public (SNMP community string)
FASTlab Synthesizer General Electric Healthcare Synthesizer Admin:admin
TRACERlab FX2 devices (model C, MeI and N) General Electric Healthcare Synthesis module admin:tracerlab (physical access required)
TRACERlab FX2 M General Electric Healthcare Chemistry Synthesizer tracerlab:tracerlab (for remote access), admin:tracerlab
HiSpeed CT/i General Electric Healthcare Computed Tomography Scanner root:#bigguy, ctuser:4$apps
Lightspeed QX/i General Electric Healthcare Computed Tomography Scanner root:#bigguy, ctuser:4$apps
Discovery CT590 RT General Electric Healthcare Computed Tomography Scanner root:#bigguy
Optima CT580 General Electric Healthcare Computed Tomography Scanner root:#bigguy
Datex-Ohmeda Engstrm Ventilator General Electric Healthcare Carestation Ventilators 23-17-21 (Super User), 34-22-14 (service-level)
IC695PNC001 General Electric Intelligent Platforms PROFINET Controller admin:system
IC695ECM850 General Electric Intelligent Platforms IEC 61850 Client admin:system
IC695ETM001 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC695CPE305 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC695CPE310 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC695CPE330 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698ETM001 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CPE010 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CPE020 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CRE020 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CPE030 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CPE040 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CRE030 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CRE040 General Electric Intelligent Platforms Ethernet module/programmable controller system
IC698CPE030 General Electric Intelligent Platforms Programmable controller with built-in web server user:system
IC698CPE040 General Electric Intelligent Platforms Programmable controller with built-in web server user:system
IC698CRE030 General Electric Intelligent Platforms Programmable controller with built-in web server user:system
IC698CRE040 General Electric Intelligent Platforms Programmable controller with built-in web server user:system
SOS iOS Client General Motors (GM), Shanghai OnStar (SOS) Software 0
Reliance SCADA Geovap Software 0
Netmonitor Heatmiser gateway between the outside world and heating system admin:admin
NETLink PRO HW 1-1a-1 and FW 1. 54 and higher Helmholz Systeme Ethernet Gateway for MPI/PROFIBUS NETLink PRO PoE:admin
RS20 Hirschmann Switch user:public, admin:private
RS30 Hirschmann Switch user:public, admin:private
MICE Hirschmann Switch user:public, admin:private
RSP 20 Hirschmann Industrial router user:public, admin:private
RSP 25 Hirschmann Industrial router user:public, admin:private
RSP 30 Hirschmann Industrial router user:public, admin:private
RSP 35 Hirschmann Industrial router user:public, admin:private
MACH 4000 Family Hirschmann Industrial router user:public, admin:private
MACH 1000 Family Hirschmann Industrial router user:public, admin:private
MACH 100 Family Hirschmann Industrial router user:public, admin:private
MACH 4002 Family Hirschmann Industrial router user:public, admin:private
MACH104 Family Full Gigabit Hirschmann Industrial router user:public, admin:private
MACH 1040 Family Full Gigabit Hirschmann Industrial router user:public, admin:private
OCTOPUS 8M Hirschmann Industrial router user:public, admin:private
OCTOPUS 16M Hirschmann Industrial router user:public, admin:private
OCTOPUS 24M Hirschmann Industrial router user:public, admin:private
EAGLE 20 Hirschmann Industrial ETHERNET Firewall admin:private, user:public
Classic Platform Switches Hirschmann Automation and Control GmbH, a division of Belden Inc. Network user:public, admin:private
EUB-550 Hitachi Ultrasound Diagnostic Scanner Service Tools:SERVICETOOL
Web Controller Hitachi Controller admin:1111
LK SERIES PLC HollySys Automation Technologies PLC FTP blank, Telnet blank
Honeywell XL Honeywell Controller Guest:guest, SysAdmin:honey
Alerton BCM-WEB Honeywell BACtalk control module, Web server and Configurator CD pass
NetAXS Honeywell Access Control Unit admin:admin
PIKO-Inverter 3.0, 3.6, 4.2, 5.5, 7.0, 8.3, 10.1 Kostal Solar solar inverter, storage system pvserver:pvwr
PIKO BA Storage System Kostal Solar solar inverter, storage system pvserver:pvwr
EDS-MD 4 Lantronix Medical Device Server admin:PASS
EDS-MD 8 Lantronix Medical Device Server admin:PASS
EDS-MD 16 Lantronix Medical Device Server admin:PASS
L-DALI DALI Light Controller LOYTEC Electronics Multiple Devices admin:loytec4u
L-INX Automation Server LOYTEC Electronics Multiple Devices admin:loytec4u
L-GATE Universal Gateway LOYTEC Electronics Multiple Devices admin:loytec4u
L-IP CEA-709/IP Router LOYTEC Electronics Multiple Devices admin:loytec4u
L-VIS LOYTEC Electronics Multiple Devices admin:loytec4u
LIOB-10x I/O Module LOYTEC Electronics Multiple Devices admin:loytec4u
LIOB-x5x I/O Module LOYTEC Electronics Multiple Devices admin:loytec4u
LIP-ME20X L-IP BACnet Router LOYTEC Electronics Multiple Devices admin:loytec4u
LWEB-802 Building Management System LOYTEC Electronics Multiple Devices admin:loytec4u
LWEB-803 Building Management System LOYTEC Electronics Multiple Devices admin:loytec4u
LWEB-900 Building Management System LOYTEC Electronics Multiple Devices admin:loytec4u
L-Proxy CEA-709 Gateway LOYTEC Electronics Gateway admin:admin
NetBeacon Element Management Software Metrobility HMI Software guest:guest, admin:admin, root:root
PLC QnUCPU QnUDVCPU Mitsubishi PLC MELSEC:MELSEC
PLC QnUCPU QnUDE(H)CPU Mitsubishi PLC QNUDECPU:QNUDECPU
MES3-255C-EN Mitsubishi Web server ecoV:ecopass, guest:user
AirWorks AWK-3131-RCC Moxa Industrial 802.11n wireless AP/bridge/client admin:root
Railway Remote I/O (ioLogik E12xx) Moxa Remote Ethernet I/O HTTP on Port 9020: 1)none:root, 2)none:none
Railway Remote I/O (ioLogik E15xx) Moxa Remote Ethernet I/O HTTP on Port 9020: 1)none:root, 2)none:none
Cellular Micro RTU Controller (ioLogik W53xx, ioLogik) Moxa micro RTU controller administrator:blank, Telnet on port 9900 / 9000: root:root
VPort 461 Industrial Video Encoder Moxa Industrial Video Encoder admin:admin, :
IA240 Embedded computer Moxa Embedded computers are designed for industrial, automation applications telnet root:root, FTP root:blank, PPP root:root, serial console root:root
IA241 Embedded computer Moxa Embedded computers are designed for industrial, automation applications telnet root:root, FTP root:blank, PPP root:root, serial console root:root
OnCell Central Manager Moxa Software admin:admin
EDS-505A Series Moxa Switch admin:
EDS-508A Series Moxa Switch admin:
OnCell G3100 Series Moxa Cellular IP Gateways HTTP admin:admin, HTTP Admin:Keep , PAP admin:
MXview Moxa Software 0
PCS-9611 Nari PLC 0
3G21WB (BigPond Firmware) Netcomm Wireless Router admin:admin
3G9WB (BigPond Firmware) Netcomm Wireless Router admin:admin
N3G001W (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB14WN (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB5 (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB5Plus4 (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB6Plus4 (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB6Plus4W (Netcomm Firmware) Netcomm Wireless Router admin:admin
NNB7 (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB9WMAXX (Netcomm Firmware) Netcomm Wireless Router admin:admin
NP804N (Netcomm Firmware) Netcomm Wireless Router admin:admin
NB1300 Plus 4 (Netcomm Firmware) Netcomm Wireless Router admin:password
NP803N (Netcomm Firmware) Netcomm Wireless Router admin:password
4G LTE Light Industrial M2M Router Netcomm Wireless Router admin:password
Linear eMerge E3 Series Nortek Access Control 0
SuperView NOVUS AUTOMATION SCADA superview:superview
AirGate-3G NOVUS Automation Dual SIM Industrial Cellular VPN Router admin:admin
N1040 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N480D NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N960 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1020 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1040i NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N1540 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N2000 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N3000 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
N120 NOVUS Automation Temperature Controller 1111 (ACESS PASSWORD), 9 3 2 1 (MASTER PASSWORD)
Dragon Medical 360 Network Edition Nuance Medical Speech Recognition Software Solutions admin:password
NS-Series Programmable Terminals Web Interface (NS12-TS01-V2, NS10-TV01-V2, NS8-TV01-V2, NS5-SQ11-V2, NS5-TQ11-V2 and NS5-MQ11-V2) Omron Programmable Terminals default:default
CX-Supervisor Omron Software 0
CX-One Omron Software 0
CJ1M CPU Units with Ethernet Functions Omron IA PLC for http: ETHERNET, for ftp: CONFIDENTIAL
PI Vision OSIsoft Software 0
PI Data Archive OSIsoft Software 0
EH-net server Ouman HMI Software admin:admin
WLAN capable devices using the WPA2 Protocol PEPPERL+FUCHS/ecom instruments Network 0
JouleTemp Phasefale Controls PLC admin:pass
Logic+ PHOENIX CONTACT Software admin:admin
FL SWITCH PHOENIX CONTACT Network admin:admin
FL COMSERVER PHOENIX CONTACT Software 0
AUTOPLATE PIPS Technology license plate recognition system (Telnet), wl_test:wl_test, vesstore:vesstore, ftp_boot:ftp_boot (FTP)
ICX30-HWC Prosoft Technology Industrial Cellular Gateway admin:password
FactoryTalk Alarms and Events Rockwell Automation Software 0
1756-EN2TSC Rockwell Automation / Allen-Bradley EtherNet/IP communication module Administrator:admin
1734-AENT Rockwell Automation / Allen-Bradley I/O Adapter admin:password
1756-EWEB Rockwell Automation / Allen-Bradley Web Server Module Administrator:
1768-EWEB Rockwell Automation / Allen-Bradley Web Server Module Administrator:
9300-RADES Rockwell Automation / Allen-Bradley Industrial Modem HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM, CHAP/PAP: ppp_user:ZYPCOM
9300-8EDM Rockwell Automation / Allen-Bradley Industrial Switch HTTP: blank:ZYPCOM, Telnet: blank:ZYPCOM, FTP: uploader:ZYPCOM
MicroLogix 1100 Embedded Web Server Rockwell Automation / Allen-Bradley Web Server guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
MicroLogix 1400 Embedded Web Server Rockwell Automation / Allen-Bradley Web Server guest:guest, administrator:ml1400 (MicroLogix 1400), administrator:ml1100 (MicroLogix 1100)
PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/, PVPlus 6 Rockwell Automation / Allen-Bradley SCADA password
TROVIS 5590 Web Module SAMSON GROUP Web Module To read data 1111:1111, To change data 4444:4444
Integrated Management System DMS Samsung Data Management Server root:rkwjsdusrnth
Integrated Management System S-NET mini Samsung S-NET IMS DMS Connection: 0000 or 1234
PowerLogic Series 800 Power Meter (PM800) Schneider Electric Power Monitoring Module 0
PowerLogic Series 800 Power Meter (PM820SD) Schneider Electric Power Monitoring Module 0
PowerLogic Series 800 Power Meter (PM870SD) Schneider Electric Power Monitoring Module 0
PowerLogic Power Meter Schneider Electric Power Monitoring Module 0
PowerLogic ION7550 Energy and power meter Schneider Electric Energy and power meter 0
PowerLogic ION7650 Energy and power meter Schneider Electric Energy and power meter 0
PowerLogic ION8650 Energy and power meter Schneider Electric Energy and power meter 0
PowerLogic Ethernet Gateway EGX100 Schneider Electric Integrated gateway-server Administrator:Gateway
PowerLogic Ethernet Gateway EGX300 Schneider Electric Integrated gateway-server Administrator:Gateway
PowerLogic EGX200 (with firmware version 5.5 or higher) Schneider Electric gateway-server Administrator:admin, User 1:master, User 2:engineer, User 3:operator
PowerLogic EGX400 (with firmware version 5.5 or higher) Schneider Electric gateway-server Administrator:admin, User 1:master, User 2:engineer, User 3:operator
Modicon Quantum Schneider Electric PLC ftpuser/password, qbf77101/hexakisoctahedron, USER:USER
Modicon M340 Schneider Electric PLC ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon M340 for Ethernet Schneider Electric PLC ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials), sysdiag:factorycast@schneider (FTP)
Modicon Premium Schneider Electric PLC FTP: sysdiag:factorycast@schneider, HTTP: USER:USER
PowerLogic PM8000 Power Meter Schneider Electric PLC Physical: 0, FTP: 8000:
PowerLogic PM8240 Power Meter Schneider Electric PLC Physical: 0, FTP: 8000:
PowerLogic PM8243 Power Meter Schneider Electric PLC Physical: 0, FTP: 8000:
PowerLogic PM8244 Power Meter Schneider Electric PLC Physical: 0, FTP: 8000:
TSX ETG 1000 Schneider Electric PLC HTTP Server, PAP Protocol: USER:USER, FTP: wsupgrade:wsupgrade, Serial Connection: Administrator:Gateway
ETG100 Schneider Electric PLC Administrator:Gateway
M258 Schneider Electric PLC adm:adm
Quantum NOE 771 xx Schneider Electric Ethernet Modules pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
CitectSCADA Schneider Electric Ethernet Modules pcfactory:pcfactory, loader:fwdownload, ntpupdate:ntpupdate, sysdiag:factorycast@schneider, test:testingpw, webserver:webpages, fdrusers:sresurdf, nic2212:poiuypoiuy, nimrohs2212:qwertyqwerty, nip2212:fcsdfcsd, noe77111_v500:RcSyyebczS (password hashed), AUTCSE:RybQRceeSd (password hashed), AUT_CSE:cQdd9debez (password hashed), target:RcQbRbzRyc (password hasshed), FTP and HTTP Service: USER:USERUSER, USER:USER, ftpuser:ftpuser (FTP)
StruxureOn Gateway Schneider Electric Proxy Server 0
Pelco VideoXpert Enterprise Schneider Electric Other 0
Triconex Tricon, model 3008 Schneider Electric Safety System 0
Simatic S7-300 (pre-2009 versions) Siemens PLC Hardcoded password: Basisk:Basisk
Simatic S7-1200 Siemens PLC admin:blank
Simatic S7-1500 Siemens PLC admin:blank
Scalance X-200 Siemens Industrial Ethernet Switches admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-1PRO Siemens Industrial Wireless LAN, Industrial Ethernet Switches admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
W788-2PRO Siemens Industrial Wireless LAN, Industrial Ethernet Switches admin:admin (HTTP), user:user (HTTP), siemens:siemens (FTP)
Synco living Web server OZW772 V2.0 Siemens Web-server Administrator:Password
Siemens WinCC 7.x Siemens HMI Software winccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator
Ruggedcom RMC30 Siemens Industrial router admin:admin, operator:operator, guest:guest
RUGGEDCOM ROX II for RX1500, RX1501, RX1510, RX1511, RX1512 Siemens Ethernet Switches Layer 3 / Routers root:admin (service), admin:admin (administrator), oper:oper (operator), guest:guest (guest)
RuggedSwitch RS8000 Siemens Industrial router admin
RuggedSwitch RS1600 Siemens Industrial router admin
RuggedSwitch RS900 Siemens Industrial router admin
Siemens ST950 Siemens Intersection controller root:zP2wxY4uE
Siemens Climatix Siemens PLC Level 6 End users: 1000 (Physical), Level 4 Service operator: 2000 (Physical), Level 2 OEM: 6000 (Physical), Web: ADMIN:SBTAdmin!
Sicam SGU Siemens RTU 642935177
Sicam SGU Siemens RTU admin@root:charleM!800
SC 7000 Siemens Patient Monitors Service 4712 (passcode, physical access required)
SC 9000XL Siemens Patient Monitors Service 4712 (passcode, physical access required)
Industrial Products (Multiple) Siemens Multiple 0
TeleControl Server Basic Siemens RTU 0
SWT3000 Siemens Software 0
TIM 1531 IRC Siemens Software 0
Building Technologies Products Siemens Other 0
AirLink Sierra Wireless 3G/4G gateway sconsole:12345
AirLink Sierra Wireless 3G/4G gateway user:12345, viewer:12345
eSolar Sinapsi Web-Server for photovoltaic applications admin:admin
Sunny WebBox SMA Solar Technology ICS device for data logging Installer:sma
Stulz WIB 8000 Stulz GmbH PLC Administrator, highest authorization: ganymed, Medium authorization: kallisto, Lowest authorization: europa
TAC Xenta 500/700/911 TAC AB PLC root:root
TAC Xenta 913 TAC AB PLC root:root
TAC Xenta 511 TAC AB PLC root:root
TAC Xenta 527 TAC AB PLC root:root
Tecomat Foxtrot Tecomat PLC 0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9)
ATMS.now Trafficware Advanced Traffic Management System naztec:naztec
NiagaraAX (ver 1) Tridium Software for JACE-2, JACE-403 or JACE-545 tridium:niagara
NiagaraAX (ver 2) Tridium Software for JACE-2, JACE-403 or JACE-545 tridium:niagara
NiagaraAX (ver 3) Tridium Software for JACE-2, JACE-403 or JACE-545 tridium:niagara
Niagara Tridium Software for JACE-2, JACE-403 or JACE-545 tridium:niagara
BL20-E-GW-EN Turck PLC HTTP: password, FTP: (unspecified hardcoded)
BL67-E-GW-EN Turck PLC HTTP: password, FTP: (unspecified hardcoded)
AirControl Ubiquiti Web Management Application ubnt:ubnt
AirOS Ubiquiti operation system ubnt:ubnt
WAGO-I/O-SYSTEM??750 Wago Controller admin:wago, user:user, guest:guest
WAGO-I/O-IPC 758-870/000-xxx Wago Compact Industrial PC? http, ftp:, user:user00 , administrator:, su:ko2003wa
Modular I/O-System Linux Fieldbus Coupler 750-860 Wago PLC root:wago , admin:wago, user:user , guest:guest
PFC200 Series WAGO PLC 0
SoftCare Evo Type SE10 WashTec Roll-over car wash system 00001 (limited access), 00000 (unlimited access)
KingSCADA 3.0 Wellintech Software administrator:administrator (role KVAdministrator)
TDW 33 Westermo Industrial Modem no password, just return, Hardcoded password: n3Y9kA6otYZu8, (?? TD-36)
MRD-305-DIN Westermo Industrial router admin:westermo
MRD-310 Westermo Industrial router admin:westermo
MRD-315 Westermo Industrial router admin:westermo
MRD-330 Westermo Industrial router admin:westermo
MRD-355 Westermo Industrial router admin:westermo
MRD-350 Westermo Industrial router admin:westermo
MRD-455 Westermo Industrial router admin:westermo
RedFox Series Westermo Industrial router admin:westermo
Wolverine Series Westermo Industrial router admin:westermo
Lynx Series Westermo Industrial router admin:westermo
Falcon Series Westermo Industrial router admin:westermo
Viper Series Westermo Industrial router admin:westermo
Intouch Wonderware SCADA Administrator:Wonderware
Historian Wonderware SQL Server SQL Server Login: aadbo:pwddbo, wwdbo:pwddbo, aaAdmin:pwAdmin, wwAdmin:wwAdmin, aaPower:pwPower, wwPower:wwPower, aaUser:pwUser, wwUser:wwUser
System Platform/Archestra Wonderware Integrated Development Environment administrator:blank
IP Cameras and DVRs Xiongmai Technology Other 0
442SR Xzeres small wind turbine MyTurbine:m442+SRt
YFGW410 gateway Yokogawa Wireless Management Station admin:!admin
DX1000 Yokogawa Software Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX1000N Yokogawa Software Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
DX2000 Advanced Yokogawa Software Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90
CENTUM CS 3000 DCS Yokogawa Distributed Control System CENTUM:CENTUM
EJX910A Multivariable Transmitter HART Communication Type Yokogawa Multivariable transmitter YOKOGAWA. (to release the Write Protect mode),
WT 3000 Driver Yokogawa Precision Power Analyzer anonymous:blank (Ethernet access)
CENTUM series and Exaopc Yokogawa OPC 0
Nightingale PPM3 Zoe Medical Vital Sign Monitor With CO2 Set Dial 1 to 49, Set Dial 2 to 48, Set Dial 3 to 46