Skip to main content
Customer Support Customer Support

Whoops! Cisco changed its default admin password (to 'Cisco1234')

  • January 12, 2016
  • 3 replies
  • 243 views
Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
Graham Cluley | January 12, 2016
 
                                           


 
There's an amusing story by Simon Sharwood in The Register today.
 
Apparently when Cisco shipped its Unified Computing System (UCS) boxes between November 17, 2015 and January 6, 2016 it made a configuration error.
 
You see, when you try to set them up you won't be able to access them with the default admin password of - wait for it - "password". Instead, for reasons best known to Cisco they changed the default password to the marginally less insecure (but not documented) "Cisco1234".
 
Full Article

    3 replies

    R
    Community Guide
    • retiredAntus67
    • Community Guide
    • 5988 replies
    • January 12, 2016
    I'll bet that upset quite a few of the people!!!
    Jasper_The_Rasper
    1 person likes this
    • Jasper_The_Rasper
      Jasper_The_Rasper
    edwin_eekelaers
    Popular Voice
    Forum|alt.badge.img+6
    Imagine Nelson saying the following "Haahaaaa Cisco". Can't they at least choose a decent password and rotate it frequently or force users to change it during initial setup because many people just forget to change it.
    Jasper_The_Rasper
    Ssherjj
    2 people like this
    • Jasper_The_Rasper
      Jasper_The_Rasper
    • Ssherjj
      Ssherjj
    R
    Community Guide
    • retiredAntus67
    • Community Guide
    • 5988 replies
    • January 13, 2016
    The following article is  a update on Cisco password change
    **********************************************************************

    Cisco admins gear up for a late night – hardcoded password in wireless points nuked.

    Wi-Fi gear, WLAN controllers, ISE get security patches.

    By: 13 Jan 2016 at 21:23, Richard Chirgwin
     
    Cisco sysadmins have a busy day ahead of them, with vulnerabilities announced in wireless LAN controllers, the Cisco Identity Services Engine, and Aironet access points.
    The Aironet 1800 series flaw, CVE-2015-6320, is that old favorite: a hardcoded static password granting access to the device.
     Luckily, the account with the hardwired credential doesn't have admin privilege, so Cisco reckons its exposure is limited to denial-of-service attacks. The access points that need updating are the 1830e, 1830i, 1850e and 1850i.
     
    full article here:
    Jasper_The_Rasper
    Ssherjj
    2 people like this
    • Jasper_The_Rasper
      Jasper_The_Rasper
    • Ssherjj
      Ssherjj

    Reply


    Terms & Conditions