Default Password in AxxonSoft Axxon One Web Client

Executive Summary

This vulnerability is a default password issue in AxxonSoft Axxon One before version 3.0.0. The web client does not enforce changing the default password on first login, allowing remote unauthenticated attackers to log in as the built-in administrator using default credentials on a newly installed system.

Useful 0 Not Useful 0

Detection Guidance

Check if the AxxonSoft Axxon One web client is accessible on default ports (e.g., 80, 443) and attempt to log in with the default administrator credentials. If successful, the system is vulnerable. Inspect web server logs for repeated failed login attempts or unusual administrator access.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full administrative access to the system, potentially leading to unauthorized control, data theft, or disruption of services. This could affect confidentiality, integrity, and availability of the system and its data.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized access, violating data protection requirements in GDPR and HIPAA. It may result in data breaches, non-compliance with security controls, and potential legal penalties due to inadequate access controls.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade AxxonSoft Axxon One to version 3.0.0 or later. After upgrading, enforce a mandatory password change for the built-in administrator account. Disable remote access to the web client if not required. Monitor network traffic for unauthorized login attempts.

Useful 0 Not Useful 0