S4E just found a high top 10 tcp port service scan
high·Misconfiguration·Updated Oct 8, 2024

Dialogic XMS Default Login Scanner

This scanner checks the /admin endpoint of Dialogic XMS for default 'admin:admin' credentials, allowing attackers to gain full administrative control.

Est. Time~1 minutes
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
2k
Times Used
continuous scan runs
3.4k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
Detail

Dialogic XMS is a media server platform used by telecommunications companies and service providers to handle voice, video, and messaging processing. The Admin Console provides a web-based interface for administrators to configure network settings, manage user accounts, and monitor system performance. It is essential for managing distributed media processing environments efficiently.

The default login vulnerability arises when the Dialogic XMS Admin Console is deployed without changing the factory-set credentials. This security misconfiguration allows anyone with network access to authenticate using well-known default usernames and passwords, such as 'admin:admin'. Attackers often scan for such weaknesses to gain unauthorized entry.

Specifically, the vulnerability is present in the login endpoint of the Admin Console, typically accessed via HTTP POST requests to /admin or similar paths. The application fails to enforce a mandatory password change upon first login, leaving the default credentials active. This oversight enables attackers to bypass authentication entirely.

If exploited, an attacker can gain full administrative access to the Dialogic XMS server, allowing them to modify configurations, intercept media streams, disrupt services, or pivot to other network resources. This can lead to significant operational downtime, data breaches, and reputational damage for the affected organization.

Solution Advice
  • Immediately change the default 'admin' password to a strong, unique password using a combination of uppercase, lowercase, numbers, and special characters.
  • Enforce a mandatory password change policy for all new accounts and upon first login to the Admin Console.
  • Disable or remove any default accounts that are not required for operations, following the principle of least privilege.
  • Implement multi-factor authentication (MFA) for all administrative access to the Dialogic XMS Admin Console.
  • Restrict network access to the Admin Console using firewall rules or VPNs, allowing only trusted IP addresses.
  • Regularly audit user accounts and login logs to detect any unauthorized access attempts or stale credentials.
  • Apply the latest security patches and updates from Dialogic to address known vulnerabilities and misconfigurations.
  • Conduct periodic vulnerability scans using tools like S4E to identify and remediate default credentials and other weaknesses.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.