Different authentication mechanisms can be used for remote maintenance. If an insecure authentication procedure is used, unauthorised third parties may obtain administrative authorisation on remote maintenance systems or for remote maintenance tools. This could allow them to access an organisation's IT systems and cause extensive damage.
An example of this is a login procedure that uses a short password. An attacker can quickly guess this password and thus gain access to an organisation's IT systems.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)