| Vendor | Model | Version | Access Type | Username | Password | Privileges | Notes |
| 3COM | CoreBuilder | 7000/6000/3500/2500 | Telnet | debug | synnet | ||
| 3COM | CoreBuilder | 7000/6000/3500/2500 | Telnet | tech | tech | ||
| 3COM | HiPerARC | v4.1.x | Telnet | adm | (none) | ||
| 3COM | LANplex | 2500 | Telnet | debug | synnet | ||
| 3COM | LANplex | 2500 | Telnet | tech | tech | ||
| 3COM | LinkSwitch | 2000/2700 | Telnet | tech | tech | ||
| Huawei | E960 | admin | admin | Admin | |||
| 3COM | NetBuilder | SNMP | ILMI | snmp-read | |||
| 3COM | Netbuilder | Multi | admin | (none) | Admin | ||
| 3COM | Office Connect ISDN Routers | 5×0 | Telnet | n/a | PASSWORD | Admin | |
| 3COM | SuperStack II Switch | 2200 | Telnet | debug | synnet | ||
| 3COM | SuperStack II Switch | 2700 | Telnet | tech | tech | ||
| 3COM | OfficeConnect 812 ADSL | Multi | adminttd | adminttd | Admin | ||
| 3COM | Wireless AP | ANY | Multi | admin | comcomcom | Admin | Works on all 3com wireless APs |
| 3COM | CellPlex | 7000 | Telnet | tech | tech | User | |
| 3COM | cellplex | 7000 | Telnet | admin | admin | Admin | |
| 3COM | cellplex | 7000 | operator | (none) | Admin | ||
| 3COM | HiPerARC | v4.1.x | Telnet | adm | (none) | Admin | |
| 3COM | 3Com SuperStack 3 Switch 3300XM | security | security | Admin | |||
| 3COM | superstack II | 1100/3300 | 3comcso | RIP000 | initialize | resets all pws to defaults | |
| 3COM | LANplex | 2500 | Telnet | tech | (none) | Admin | |
| 3COM | CellPlex | HTTP | admin | synnet | Admin | ||
| 3COM | NetBuilder | (none) | admin | User | SNMP_READ | ||
| 3COM | SuperStack II Switch | 2700 | Telnet | tech | tech | Admin | |
| 3COM | CellPlex | 7000 | Telnet | root | (none) | Admin | |
| 3COM | HiPerACT | v4.1.x | Telnet | admin | (none) | Admin | |
| 3COM | CellPlex | 7000 | Telnet | tech | (none) | Admin | |
| 3COM | CellPlex | 7000 | Telnet | admin | admin | Admin | |
| 3com | CellPlex | 7000 | Telnet | tech | tech | Admin | |
| 3com | super | Telnet | admin | (none) | Admin | ||
| 3com | cellplex | 7000 | Multi | admin | admin | Admin | RS-232/telnet |
| 3COM | SuperStack 3 | 4XXX | Multi | admin | (none) | Admin | |
| 3COM | SuperStack 3 | 4XXX | Multi | monitor | monitor | User | |
| 3COM | SuperStack 3 | 4400-49XX | Multi | manager | manager | User can access/change operational setting but not security settings | |
| 3com | CellPlex | 7000 | Telnet | root | (none) | Admin | |
| 3com | Netbuilder | Multi | admin | (none) | Admin | ||
| 3com | cellplex | 7000 | Telnet | operator | (none) | Admin | |
| 3com | OfficeConnect 812 ADSL | 01.50-01 | Multi | admin | (none) | Admin | |
| 3com | cellplex | Multi | admin | admin | Admin | ||
| 3com | HiPerACT | v4.1.x | Telnet | admin | (none) | Admin | |
| 3com | 3c16405 | Multi | n/a | (none) | Admin | ||
| 3com | 3c16405 | Console | Administrator | (none) | Admin | ||
| 3com | Switch | 3300XM | Multi | admin | admin | Admin | |
| 3com | SS III Switch | 4xxx (4900 – sure) | Telnet | recovery | recovery | resets_all_to_default | u need to power off unit. tbl_ |
| 3com | OfficeConnect Wireless 11g Cable/DSL Gateway | HTTP | (none) | admin | Admin | ||
| 3COM | Netbuilder | HTTP | Root | (none) | Admin | http://10.1.0.1 | |
| 3com | 3C16405 | Multi | admin | (none) | Admin | ||
| 3COM | 3C16450 | Multi | admin | (none) | Admin | telnet or serial | |
| 3COM | 3C16406 | Multi | admin | (none) | Admin | telnet or serial | |
| 3com | OfficeConnect 812 ADSL | 01.50-01 | Multi | admin | (none) | Admin | |
| 3com | cellplex | Multi | n/a | (none) | Admin | ||
| 3com | cellplex | Multi | admin | admin | Admin | ||
| 3com | HiPerACT | v4.1.x | Telnet | admin | (none) | Admin | |
| 3com | 3c16405 | Console | Administrator | (none) | Admin | ||
| 3com | CellPlex | 7000 | Telnet | tech | (none) | Admin | |
| 3com | Switch | 3300XM | Multi | admin | admin | Admin | |
| 3com | SS III Switch | 4xxx (4900 – sure) | Telnet | recovery | recovery | resets_all_to_default | u need to power off unit. tbl_ |
| 3com | OfficeConnect Wireless 11g Cable/DSL Gateway | HTTP | (none) | admin | Admin | ||
| 3com | 3CRADSL72 | 1.2 | Multi | (none) | 1234admin | Admin | snmp open by default with public / private community |
| 3com | CB9000 / 4007 | 3 | Console | Type User: FORCE | (none) | Admin | This will recover a lost password and reset the switch config to Factory Default |
| 3com | officeconnect | Multi | n/a | (none) | Admin | ||
| 3Com | Internet Firewall | 3C16770 | HTTP | admin | password | Admin | |
| 3com | superstack II Netbuilder | 11.1 | Multi | n/a | (none) | Admin | |
| 3COM | Office Connect ISDN Routers | 5×0 | Telnet? | n/a | PASSWORD | Admin | |
| 3M | VOL-0215 etc. | SNMP | volition | volition | Admin | for Volition fibre switches | |
| Accelerated Networks | DSL CPE and DSLAM | Telnet | sysadm | anicust | |||
| ACCTON | Wirelessrouter | T-online | HTTP | none | 0 | Admin | YEAHH |
| accton t-online | accton | Multi | (none) | 0 | Admin | ||
| accton t-online | accton | Multi | (none) | 0 | Admin | ||
| Aceex | Modem ADSL Router | HTTP | admin | (none) | Admin | ||
| Aceex | Modem ADSL Router | HTTP | admin | (none) | Admin | ||
| ADC Kentrox | Pacesetter Router | Telnet | n/a | secret | |||
| ADIC | Scalar 100/1000 | HTTP | admin | secure | Admin | ||
| ADIC | Scalar i2000 | Multi | admin | password | Admin | ||
| adtran | MX2800 | Telnet | n/a | adtran | Admin | hit enter a few times | |
| adtran | Smart 16/16e | Telnet | n/a | (none) | Admin | hit enter a few times | |
| adtran | Atlas 800/800Plus/810Plus/550 | Telnet | n/a | Password | Admin | crtl-L | |
| adtran | Smart 16/16e | Telnet | n/a | PASSWORD | Admin | hit enter a few times | |
| adtran | NxIQ | Telnet | n/a | adtran | Admin | hit enter a few times | |
| adtran | TSU IQ/DSU IQ | Telnet | n/a | (none) | Admin | hit enter a few times | |
| adtran | Express 5110/5200/5210 | Telnet | n/a | adtran | Admin | hit enter a few times | |
| adtran | Agent Card | Telnet | n/a | ADTRAN | Admin | ctrl-PTT | |
| adtran | TSU Router Module/L128/L768/1.5 | Telnet | n/a | (none) | Admin | hit enter a few times | |
| adtran | T3SU 300 | Telnet | n/a | adtran | Admin | Hit enter a few times | |
| Alcatel | PBX | 4400 | Port 2533 | kermit | kermit | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | dhs3mt | dhs3mt | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | at4400 | at4400 | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | mtch | mtch | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | mtcl | mtcl | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | root | letacla | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | dhs3pms | dhs3pms | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | adfexc | adfexc | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | client | client | unknown | |
| Alcatel | PBX | 4400 | Port 2533 | install | llatsni | unknown | thanks to Nicolas Gregoire |
| Alcatel | PBX | 4400 | Port 2533 | halt | tlah | unknown | thanks to Nicolas Gregoire |
| Alcatel | Office 4200 | Multi | n/a | 1064 | Admin | by Bazille | |
| Alcatel | OmniStack 6024 | Telnet | admin | switch | Admin | ||
| Alcatel | Omnistack/Omniswitch | Telnet/Console | diag | switch | Admin | ||
| Alcatel | Omnistack/omniswitch | Telnet | diag | switch | Admin | ||
| Alcatel | Timestep VPN 1520 | 3.00.026 | Permit config and console | root | permit | Admin | Perm/Config port 38036 |
| Alcatel | OXO | 1.3 | Multi | (none) | admin | User | |
| Allied | Telesyn | Multi | manager | friend | Admin | ||
| Allied Telesyn | AT-8024(GB) | Console | n/a | admin | Admin | ||
| Allied Telesyn | AT-8024(GB) | HTTP | manager | admin | Admin | ||
| Allied Telesyn | AT Router | HTTP | root | (none) | Admin | ||
| ALLNET | T-DSL Modem | Software Version: v1.51 | HTTP | admin | admin | Admin | |
| Allnet | ALL0275 802.11g AP | 1.0.6 | HTTP | none | admin | Admin | |
| Alteon | ACEDirector3 | console | admin | (none) | |||
| Alteon | ACEswitch | 180e | HTTP | admin | admin | Admin | |
| Alteon | ACEswitch | 180e | Telnet | admin | (none) | ||
| Alteon | ACEswitch | 180e | HTTP | admin | linga | Admin | none |
| Alteon | AD4 | 9 | Console | admin | admin | Admin | Factory default |
| AMBIT | ADSL | Telnet | root | (none) | Admin | ||
| Ambit | Cable Modem 60678eu | 1.12 | Multi | root | root | Admin | |
| Ambit | Cable Modem | Multi | root | root | Admin | Time Warner Cable issued modem | |
| Ambit | ntl:home 200 | 2.67.1011 | HTTP | root | root | Admin | This is the cable modem supplied by NTL in the UK |
| Amitech | wireless router and access point 802.11g 802.11b | any | HTTP | admin | admin | Admin | Web interface is on 192.168.1.254 available on the LAN ports of the AP. |
| Andover Controls | Infinity | any | Console | acc | acc | Admin | Building managment system |
| AOC | zenworks 4.0 | Multi | n/a | admin | Admin | ||
| APC | 9606 Smart Slot | Telnet | n/a | backdoor | Admin | ||
| APC | USV Network Management Card | SNMP | n/a | TENmanUFactOryPOWER | Admin | nachzulesen unter http://www.heise.de/security/news/meldung/44899 gruss HonkHase | |
| apc | Smartups 3000 | HTTP | apc | apc | Admin | By Sentinel Software.net | |
| APC | UPSes (Web/SNMP Mgmt Card) | HTTP | device | device | Admin | Secondary access account (next to apc/apc) | |
| APC | Smart UPS | Multi | apc | apc | Admin | ||
| Apple | AirPort Base Station (Graphite) | 2 | Multi | (none) | public | public | See Apple article number 58613 for details |
| Apple | Airport Base Station (Dual Ethernet) | 2 | Multi | n/a | password | Guest | See Apple article number 106597 for details |
| Apple | Airport Extreme Base Station | 2 | Multi | n/a | admin | Guest | see Apple article number 107518 for details |
| Arescom | modem/router | 10XX | Telnet | n/a | atc123 | Admin | |
| ARtem | ComPoint – CPD-XT-b | CPD-XT-b | Telnet | (none) | admin | Admin | |
| Asante | IntraSwitch | multi | IntraSwitch | Asante | Admin | ||
| Asante | IntraStack | multi | IntraStack | Asante | Admin | ||
| Asante | FM2008 | Telnet | superuser | (none) | Admin | ||
| Ascend | Yurie | Multi | readonly | lucenttech2 | |||
| Ascend | Router | Telnet | n/a | ascend | Admin | ||
| Ascend | Sahara | Multi | root | ascend | |||
| Ascom | Ascotel PBX | ALL | Multi | (none) | 3ascotel | Admin | no user req. _by DTK |
| Aspect | ACD | 6 | HTTP | customer | none | User | views error logs |
| Aspect | ACD | 6 | Oracle | DTA | TJM | User | |
| Aspect | ACD | 7 | Oracle | DTA | TJM | User | |
| Aspect | ACD | 8 | Oracle | DTA | TJM | User | |
| AVAYA | g3R | v6 | Console | root | ROOT500 | Admin | |
| Avaya | Definity | G3Si | Multi | craft | (none) | Admin | |
| Avaya | Cajun Pxxx | Multi | root | root | Admin | ||
| Avaya | Cajun | P550R P580 P880 and P882 | Multi | diag | danger | Developer | |
| Avaya | Cajun | P550R P580 P880 and P882 | Multi | manuf | xxyyzz | Developer | |
| Avaya | Pxxx | 05/02/2014 | Multi | diag | danger | Admin | |
| Avaya | Pxxx | 05/02/2014 | Multi | manuf | xxyyzz | Admin | |
| AVAYA | Cajun P33x | firmware before 3.11.0 | SNMP | n/a | admin | Admin | check the Bugtraq archives for more information |
| Avaya | definity | up to rev. 6 | any | craft | crftpw | Admin | |
| Avaya | CMS Supervisor | 11 | Console | root | cms500 | Admin | |
| Axis | NETCAM | 200/240 | Telnet | root | pass | Admin | |
| Axis | All Axis Printserver | All | Multi | root | pass | Admin | |
| Axis | Webcams | HTTP | root | pass | Admin | ||
| Axis | 540/542 Print Server | Multi | root | pass | Admin | ||
| axis | 2100 | Multi | n/a | (none) | Admin | ||
| Axis | NETCAM | 200/240 | root | pass | |||
| Bay Networks | Switch | 350T | Telnet | n/a | NetICs | Admin | |
| Bay Networks | SuperStack II | Telnet | security | security | Admin | ||
| Bay Networks | Router | Telnet | User | (none) | User | ||
| Bay Networks | Router | Telnet | Manager | (none) | Admin | ||
| Bay Networks | Router | User | (none) | User | |||
| Bay Networks | SuperStack II | security | security | Admin | |||
| Bay Networks | Switch | 350T | n/a | NetICs | Admin | ||
| Belkin | F5D6130 | SNMP | (none) | MiniAP | Admin | Wireless Acess Point IEEE802.11b | |
| Belkin | F5D7150 | FB | Multi | n/a | admin | Admin | |
| Billion | Bipac 5100 | HTTP | admin | admin | Admin | ||
| Bintec | Bianka Routers | Multi | admin | bintec | Admin | ||
| BinTec | Bianca/Brick | XM-5.1 | SNMP | n/a | snmp-Trap | read/write | by rootkid |
| BinTec | x1200 | 37834 | Multi | admin | bintec | Admin | |
| BinTec | x2300i | 37834 | Multi | admin | bintec | Admin | |
| BinTec | x3200 | 37834 | Multi | admin | bintec | Admin | |
| BMC | Patrol | 6 | Multi | patrol | patrol | User | |
| BMC Software | Patrol | all | BMC unique | Administrator | the same all over | Admin | this default user normally for ALL system in this area with one Password |
| Breezecom | Breezecom Adapters | 3.x | n/a | Master | Admin | ||
| Breezecom | Breezecom Adapters | 2.x | n/a | laflaf | Admin | ||
| Breezecom | Breezecom Adapters | 4.4.x | Console | n/a | Helpdesk | Admin | |
| Breezecom | Breezecom Adapters | 4.x | n/a | Super | |||
| Breezecom | Breezecom Adapters | 3.x | n/a | Master | |||
| Breezecom | Breezecom Adapters | 2.x | n/a | laflaf | |||
| Brocade | Fabric OS | All | Multi | root | fivranne | Admin | Gigiabit SAN (by Nicolas Gregoire) |
| Brocade | Silkworm | all | Multi | admin | password | Admin | Also on other Fiberchannel switches |
| Brocade | Fabric OS | Multi | admin | password | Admin | Gigabit SAN | |
| Brother | NC-3100h | (none) | access | network board access | |||
| Brother | NC-4100h | (none) | access | network board access | |||
| Brother | HL-1270n | Multi | n/a | access | network board access | ||
| Buffalo | Wireless Broadband Base Station-g | WLA-G54 WBR-G54 | HTTP | root | (none) | Admin | http://192.168.11.1 |
| Cabletron | Netgear modem/router and SSR | netman | (none) | Admin | |||
| Cayman | Cayman DSL | n/a | (none) | Admin | |||
| Celerity | Mediator | Multi | Multi | mediator | mediator | User | |
| Celerity | Mediator | Multi | root | Mau'dib | Admin | Assumption: the password is Mua'dib | |
| Cellit | CCPro | Multi | cellit | cellit | Admin | ||
| Checkpoint | SecurePlatform | NG FP3 | Console | admin | admin | Admin | |
| CipherTrust | IronMail | Any | Multi | admin | password | Admin | |
| CISCO | Cache Engine | Console | admin | diamond | Admin | ||
| Cisco | ConfigMaker | cmaker | cmaker | Admin | |||
| cisco | cva 122 | Telnet | admin | admin | Admin | ||
| Cisco | CNR | All | CNR GUI | admin | changeme | Admin | This is the default password for Cisco Network Registrar |
| Cisco | Netranger/secure IDS | Multi | netrangr | attack | |||
| Cisco | BBSM | 5.0 and 5.1 | Telnet or Named Pipes | bbsd-client | changeme2 | database | The BBSD Windows Client password will match the BBSD MSDE Client password |
| Cisco | BBSD MSDE Client | 5.0 and 5.1 | Telnet or Named Pipes | bbsd-client | NULL | database | The BBSD Windows Client password will match the BBSD MSDE Client password |
| Cisco | BBSM Administrator | 5.0 and 5.1 | Multi | Administrator | changeme | Admin | |
| Cisco | Netranger/secure IDS | 3.0(5)S17 | Multi | root | attack | Admin | must be changed at the first connection |
| Cisco | BBSM MSDE Administrator | 5.0 and 5.1 | IP and Named Pipes | sa | (none) | Admin | |
| Cisco | Catalyst 4000/5000/6000 | All | SNMP | (none) | public/private/secret | RO/RW/RW+change SNMP config | default on All Cat switches running the native CatOS CLI software. |
