Weakness
The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are not required to be changed during initial configuration or operation. Using these accounts provides full system access.
Affected products
- daktronics dmp-5000_firmware
- daktronics dmp-5000
- daktronics dmp-8000_firmware
- daktronics dmp-8000
- daktronics vfc-dmp-5000_firmware
- daktronics vfc-dmp-5000
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.