The Siemens Synco OZW Web Server devices OZW672., OZW772., and OZW775 with firmware before 4 have an unspecified default password, which makes it easier for remote attackers to obtain administrative access via a network session.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Synco_ozw_web_server | Siemens | ozw672.01 (including) | ozw672.01 (including) |
| Synco_ozw_web_server | Siemens | ozw672.04 (including) | ozw672.04 (including) |
| Synco_ozw_web_server | Siemens | ozw672.16 (including) | ozw672.16 (including) |
| Synco_ozw_web_server | Siemens | ozw772.01 (including) | ozw772.01 (including) |
| Synco_ozw_web_server | Siemens | ozw772.04 (including) | ozw772.04 (including) |
| Synco_ozw_web_server | Siemens | ozw772.16 (including) | ozw772.16 (including) |
| Synco_ozw_web_server | Siemens | ozw772.250 (including) | ozw772.250 (including) |
| Synco_ozw_web_server | Siemens | ozw775 (including) | ozw775 (including) |