The HTTP service in American Power Conversion (APC) PowerChute uses a default username and password, which allows remote attackers to gain system access.Referenceshttp://governmentsecurity.org/articles/DefaultLoginsandPasswordsforNetworkedDevices.phphttp://www.osvdb.org/30768
