ZKSoftware WebServer Default Admin Credentials

Summary
This host is running ZKSoftware WebServer and it has default admin credentials.
Impact
Successful exploitation will allow remote attacker to gain access to sensitive information or modify system configuration. Impact Level: Application
Solution
Change the default credentials.
Insight
It was possible to login with default credentials.
Affected
ZKSoftware WebServer
Detection
Send a crafted default admin credentials via HTTP POST request and check whether it is possible to login or not.
References