VDB-ID: 96
Title: Rooted SSH/SFTP Daemon Default Login Credentials
Vulnerability Date: 2014-09-02
Download: https://play.google.com/store/apps/details?id=web.oss.sshsftpDaemon
Vendor: open.software.solutions[4t]gmail.com
Notified: 2014-09-03
Vendor Contact: open.software.solutions[4t]gmail.com
Description: This app is a SSH terminal server AND an SFTP file server.
Vulnerability: The software comes preconfigured with a default login of User: root Password: abc123. This weak password would easily be guessed leading to root compromise of the android system
CVE-IDs: 
Exploit: 
URL: http://www.vapid.dhs.org/advisories/rooted-sshd-android.html
Credit: Larry W. Cashdollar, @_larry0