News: HP StorageWorks P2000 G3 Modular Smart Array Backdoor

A few minutes ago I read this email on Bugtraq mailing list which is the following:

Hi,

i just found out that there is a hidden user on every HP MSA2000 G3 
SAN out there:

username: admin
password: !admin

this user doesnt show up in the user manager, and the password 
cannot be changed - looks like the perfect backdoor for everybody.

Ha! So, another popular product is backdoored by default. Not bad… :P

Advertisements