Ability to log into C20 web interface using its IP address as password

[Luke Sykes]

Good afternoon,

One of our customers is in the process of upgrading all of their C20's to version TC5.1.5, and have just accidently managed to log into the admin web console using the units IP address as the password. The set password also works!

They have tried this on a bunch of other C20 (owned by the same customer and others) and cannot repeat. These units he has tried are slightly different in as much as the options applied are different. On the CODEC that fails, the options are "Natural Presenter" and "Premium Resolution". The others are "Natural presenter" and "High Definition".

Whilst I can't see this making any odds, it seems to be the only obvious difference between almost identical units.

The software revisions are the same on these CODECs (all currently on TC5.1.0.280662), but he have also checked out some other CODECs running TC5.1.5.

The serial number of the CODEC at fault is : F1AN10C00070

In addition to the above security oddity, can we also check why this particular CODEC on has the "Premium Resolution" option rather than the "High Definition" option? (This may not be your department)

The customer believes that all of the CODECs where purchased with the same specification at the same time.

For you reference, the serial number of some of their other CODECs are : F1AN10C00105 and F1AN10C00275

Many thanks

Luke

[aostense · Accepted solution]

Hi Luke,

I would think the C20 doesn't have a password set. If no password is set for user "admin", you can type anything in the password field, as long as you type in "admin" as the user.

So try this;

Login to the codec with admin through WebUI > at the right top corner you should see a dropdown menu for "User: admin" > select "Change password" > leave "Current password" as blank > and type in the new password in "New password" and "Repeat new password", then press "Change password".

If you see "Password changed successfully", you can be sure there was no password set for user admin, and your new password would be the only password that would successfully log you in.

Hope this helps,

Arne

[Luke Sykes]

Hi Arne

Of course that makes complete sense. I will suggest this to the customer and let you know how he gets on.

Thanks very much for your help.

Cheers

Luke

[aostense]

FYI

In TC6.0 you will now get a warning indicator on your screen if no password is set (blank password) for your admin account. This indicator will stick to the screen, until you set a new password.

/Arne