Title: Hardware Installation Guide.pdf
Previous Behavior (pre-v1.194 Firmware)Prior to firmware version 1.194, the default login account was accessible under the following conditions:If there were no other user-defined accounts, the default login account was always enabledIf DIP SW1 was set to ON, then the default login account was enabledIf a user-defined account was created using the same credentials as the default login accountTo ensure that the default login account is properly disabled:Ensure that at least one user-defined account exists on the controller with different credentials than the default login accountDIP SW1 is in the OFF positionThe above guidelines were not always followed when controllers were deployed on customer sites, making the controllers vulnerable to attacks.23.2.3Modified Behavior (v1.194 Firmware and later)With firmware version 1.194 or later, the default login account cannot be left enabled indefinitely. The following changes have been made: