A new outdoor AP for a transit shelter still accepts ‘admin/admin’. How should a hardening assessment treat that finding?
Select an answer to reveal the explanation.
Short Explanation
‘admin/admin’ on a live outdoor AP is a fire alarm, not a sticky note. Client-side WPA3 does not forgive a wide-open management login on city transit gear.
Full Explanation
Factory-default administrative credentials on deployed WLAN APs are high-priority preventative findings because they enable trivial device takeover. Physical outdoor mounting and strong client AKM do not mitigate a default admin login. Remediate credentials before treating the AP as production-hardened.