Hi Team, recently the credentials for our gui s100 were changed and everybody says it's not them, and now nobody knows them.
I know if I can access the mysql db I might be able to reset it as I am able to login using ssh; the trick is I am not sure which credentials I use for mysql, are there any defaults or I use for ssh, your prompt response will be highly appreciated.
Was the device exposed to the internet such that the web console could be accessed and possibly hacked?
You could always factory reset the device and then restore a system backup.
While I do not know it for certain, most password are encrypted, so that even if you could access them, they would not be readable or recoverable and it is highly unlikely that anyone, to include YS, would provide such info on how to hack their own system on a public forum.
If you can't do the restore, then I suggest you contact YS support directly, but be prepared to consider the possibility to rebuild from scratch and if I were you, I would seriously examine how this occurred and consider any and all security measures needed to prevent going forward.
Yes, I had to run a reset. It's done. And yes I think it was a hack
Next time set a complex alphanumerical password and configure an email (if the pbx is connected to internet) in case you forget the password.
Take a look at this website if you use an unique password for you accounts and the password has been hacked :
Thank you very much Elvis
Unified Communications
