cmty-ssh-default-account-root-password-raspberrypi.xml

<?xml version="1.0" encoding="UTF-8"?>
<Vulnerability id="cmty-ssh-default-account-root-password-raspberrypi" published="2016-08-16" added="2016-08-16" modified="2016-10-26" version="1.0">
  <name>Default ssh account: root password "raspberrypi"</name>
  <severity>10</severity>
  <cvss>(AV:N/AC:L/Au:N/C:C/I:C/A:C)</cvss>
  <Tags>
    <tag>Default Account</tag>
    <tag>SSH</tag>
  </Tags>
  <AlternateIds>
  </AlternateIds>

  <Description>
    <p>The root account uses a password of &quot;raspberrypi&quot;.  This would allow
      anyone to log into the machine via SSH and take complete
      control.</p>
  </Description>
  <Solutions>
    <Solution id="cmty-ssh-default-account-root-password-raspberrypi" time="15m">
      <summary>Fix Default SSH account: root password: raspberrypi</summary>
      <workaround>
        <p>
          Change the password to a strong non-default value.
        </p>
      </workaround>
    </Solution>
  </Solutions>
</Vulnerability>