The account '666666' on the remote host has the default password '666666'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'admin' has no password set. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'admin' on the remote host has the default password '1111111'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password '00000000'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password '12345'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password '123456'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password '666666'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password '7ujMko0vizxv'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password 'vizxv'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password 'xc3511'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The account 'root' on the remote host has the default password 'adminIWSS85'. A remote attacker can exploit this issue to gain administrative access to the affected system.

The remote server is running a version of Webmin that is vulnerable to a Session ID spoofing attack. An attacker could use this flaw to log in as admin on this host, and gain full control of the system.

The remote server is running a version of Usermin which is vulnerable to Session ID spoofing. An attacker may use this flaw to log in as the 'root' user, and gain full control of the remote host.

The remote host is running a Sendmail server with a default SASL password of 'sendmail' / 'sendmailpwd'.  A spammer may use this account to use the remote server as a spam relay for the internet.

The remote Windows host has a 'guest' FTP account enabled. This could allow a remote attacker to upload or download arbitrary files on the remote host.

Note that this plugin only tests for guest accounts over FTP.

The version of Tectia SSH Server running on the remote host is affected by an authentication bypass vulnerability.  A remote, unauthenticated attacker can bypass authentication by sending a specially crafted request, allowing the attacker to authenticate as root.

The software is only vulnerable when running on Unix or Unix-like operating systems.

The remote device appears to be a HP StorageWorks MSA P2000 series.
There is a hidden, undocumented account named 'admin' secured with a default password of '!admin'.

A remote attacker can exploit this to gain privileged access to the management interface.

It was possible to log into the remote host with the login 'X' and a blank password. 

A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account.  This probably means that the remote host has been compromised by the use of this exploit.

The account 'netscreen' on the remote host has the password '<<< %s(un='%s') = %u', a known backdoor password. The affected devices are firewalls and VPN gateways. A remote attacker can exploit this vulnerability to gain administrative access and monitor network traffic, deny network access, and alter device and firewall configurations.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
94356	Default Password '666666' for '666666' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94358	Unprotected 'admin' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94361	Default Password '1111111' for 'admin' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94376	Default Password '00000000' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94379	Default Password '12345' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94380	Default Password '123456' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94382	Default Password '666666' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94384	Default Password '7ujMko0vizxv' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94399	Default Password 'vizxv' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/11	critical
94400	Default Password 'xc3511' for 'root' Account	Nessus	Default Unix Accounts	2016/10/28	2022/4/7	critical
99247	Default Password 'adminIWSS85' for 'root' Account	Nessus	Default Unix Accounts	2017/4/7	2022/4/11	critical
11279	Webmin 'miniserv.pl' Base-64 String Metacharacter Handling Session Spoofing	Nessus	CGI abuses	2003/2/28	2021/1/19	critical
11280	Usermin 'miniserv.pl' Base-64 String Metacharacter Handling Session Spoofing	Nessus	CGI abuses	2003/2/28	2021/1/19	high
14832	Debian GNU/Linux Sendmail Default SASL Password	Nessus	SMTP problems	2004/9/28	2018/7/10	high
10166	Windows NT FTP 'guest' Account Present	Nessus	FTP	1999/6/22	2018/8/13	critical
63156	Tectia SSH Server Authentication Bypass	Nessus	Gain a shell remotely	2012/12/5	2022/7/11	critical
51369	HP StorageWorks MSA P2000 Hidden 'admin' User Default Credentials	Nessus	Gain a shell remotely	2010/12/23	2026/1/12	critical
14818	MS04-028 Exploitation Backdoor Account Detection	Nessus	Backdoors	2004/9/24	2018/11/15	high
87601	Juniper ScreenOS SSH / Telnet Authentication Backdoor	Nessus	Default Unix Accounts	2015/12/23	2025/10/2	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

high

critical

critical

critical

high

critical