Intrusion PreventionTomato.Router.Default.Credentials
Description
This indicates an attempt to login to a Tomato router using default credentials.
Tomato is an open source router firmware. A remote attacker can exploit the default credentials to authenticate with the application to gain administrator level privileges on the target system.
Affected Products
Tomato router firmware
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Monitor the traffic from that network for any suspicious activity.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 48693 |
| Created | Feb 05, 2020 |
| Updated | Jun 22, 2022 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | Linux |
| Affected App | Other |