Atlona AT-OME-MS42 Default Login Scanner

The Atlona AT-OME-MS42 is a versatile 4x2 matrix switcher utilized predominantly in professional audiovisual installations, where seamless switching between HDMI, USB-C, and DisplayPort inputs is required. It is widely adopted in conference rooms and educational settings to facilitate dynamic presentations and content sharing. The switcher's built-in web management interface simplifies configuration and management of AV signals for administrators. Its default credentials, if left unchanged, can lead to unauthorized access. The Atlona AT-OME-MS42 is a popular choice due to its robust features like 4K/UHD 60 Hz capability and Ethernet control.

This scanner identifies the presence of the default login vulnerability in Atlona AT-OME-MS42 devices. The default credentials of "admin:Atlona" pose a significant security risk if not altered. This vulnerability can lead to unauthorized administrative access allowing attackers to modify configurations. It exploits the open web management interface that still retains factory settings. Identifying this default login vulnerability helps mitigate the risk of unauthorized network access and configuration disruptions.

The Atlona AT-OME-MS42 uses a POST request to `/cgi-bin/login.cgi` to authenticate via a base64 encoded string representing the default admin credentials. The scanner detects vulnerability success by matching specific response elements, including the response body containing "Login Success!" and a status code of 200. This detection relies on accurately simulating the login process using the known default credentials. The result confirms if the device configuration is susceptible to factory default exploitation. Identifying such vulnerabilities is crucial for securing network setups from unauthorized access.

If exploited, malicious entities could gain unauthorized access to sensitive AV systems and data. This could allow attackers to sabotage audiovisual configurations, leading to business interruptions and loss of confidential information. Malicious access might also be used to pivot deeper into a network, posing further security threats. Maintaining default credentials significantly increases the risk of cyber intrusions. By altering switcher configurations, an attacker might disrupt AV broadcasts or hinder regular operations.

REFERENCES

• https://atlona.com/pdf/manuals/AT-OME-MS42_G.pdf