Skip to content

H3-2021-0019

Weak or Default Credentials - Password Spray

Category CREDENTIALS
Base Score 9.0

Description

Weak credentials include passwords that are easily obtained by password guessing, password spraying, or cracked using dictionary attacks. Default passwords are publicly known and obtainable by an attacker and provide immediate access to a system.

Impact

An attacker can openly maneuver throughout an environment and access information if a password is compromised.

References