Storage components are frequently delivered with a default configuration that makes it possible to commission the devices quickly and with as many functions as possible. Unnecessary protocols (such as HTTP, Telnet, and insecure SNMP versions) are thus enabled in many devices. If storage components with insecure factory settings are used in production environments, it is easier to access them without authorisation. This may result in services, for example, being no longer available or confidential information of the organisation being accessed without authorisation.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)