Description
The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.
Advisories 2
- ICSA-12-297-02 Korenix Jetport 5600 Series Hard-coded Credentials CISA ICS & IT advisories · Jun 6, 2025
- ICSA-12-263-02 ORing Industrial Networking IDS-5042/5042+ Hard-Coded Credential Vulnerability CISA ICS & IT advisories · Jun 5, 2025