Default Passwords on Internet-Connected Systems Vulnerability Disclosure

This document, issued by Schneider Electric on July 31, 2013, warns that attackers can easily identify and exploit Internet-connected systems using factory default passwords, which are often simple, publicly documented, and shared across product lines. It provides mitigation guidance, including changing default passwords, restricting network access, and using firewalls or intrusion detection systems, especially for devices that cannot have passwords modified.