Password recovery AP9210I

[Anonymous user]

Hello, 

this is my first post on this forum.

I recently purchased a (rather old) APC switched rack PDU (model AP9210I). The thing is, I can't seem to reset the password on the unit (and the original owner can't remember). I followed some instructions I found online, which were not specifically for the model I have though, so none of those methods worked.

Here is what I tried so far:

• Power on and try to log on with username: apc and password: apc (tried Web, Telnet and serial) -> password refused
• Press reset for 10 seconds, release, press again for 1 second and try to login (using serial console) -> password refused
• Login with random user and password: TENmanUFactOryPOWER (telnet). Login to service menu worked, EEPROM dump worked, but I did not find a username and password (that specific vulnerability must have been fixed).
• I did try some obvious "default passwords", like admin/admin etc, with no success.

Is there another method I can try?

Thanks,

mccoy

[BillP]

Hi,

Please provide the serial number of the unit and I can send the password procedure.

[Anonymous user]

Hi,

thanks for your reply.

Here is the serial number: WA9924009648.

Thanks in advance,

mccoy

[BillP · Accepted solution]

Hi,

Log in using  lower case apc for user name in either hyper-terminal or telnet (won't work via the web)

use the following for password (any letters are capitalized)

12<:9>^IBC=@

After entering the new password you will have to log in again but use lower case apc for both user name and password.

[Anonymous user]

Hi,

that worked perfectly. Thank you very much!

Kind regards,

mccoy

[Terry_Kennedy_apc]

Note that these older units have a number of unfixed vulnerabilities in the underling protocols. The fact that you were able to log in with the "10MAN" method proves your device is vulnerable - if you try it again, you'll probably see the username / password you setup in the EEPROM dump.

Because of this, these units should not be used in locations where untrusted people have network or console access to the device.

[Anonymous user]

Hi,

I am using the device in a lab-type environment only. It's not connected to anything remotely critical, nor is it public facing (and it is locked in a cabinet, restricting access to the serial port.) I realise that one shouldn't be using it in production any longer if it has any vulnerabilities.

mccoy

[Anonymous user]

Hello Bill,

I am trying to use a couple of older AP9210 and have the same password reset issue ...

Here are the serial numbers :

WA9902001403

WA9848026242

can you help ?

Thanks

Pierre

[Anonymous user]

I know your post is 8 months old, but I run in the same issue as you and find my way out.

I you still need to recover the two units, try these passwords with the same procedure as above:

WA9902001403  124859^IBC;>
WA9848026242  149698^IBB?D

[Anonymous user]

Hi,

I've recently picked up a masterswitch 9210I from ebay. But as with the other guys above I cant login as a password has been set which I don't have. 

So I was wondering if anyone can assist with resetting serial number: WA9919014044 ?

Regards

Rich

[Anonymous user]

I have exact same problem.

I can't login after I changed password.

I tried reset 10sec, 10sec with 1sec, multiple click but none of them are working.

Also, I think it resets network card only because it gives me username prompt in 5-7 seconds.

I checked the device but there's no serial numbers either.

Please inform how to find serial #.

[Terry_Kennedy_apc]

The serial number is normally on the side of the unit, so you need to remove the rack ears to see it. I believe that on these old units, it is a plain paper label (non-barcode) with the serial number and the MAC address.

The AP9210 definitely is affected by the "well-known backdoor password" and it was not fixed by APC because the unit was long obsolete even then.

[BillP]

Hi,

Use lower case apc for user name in either hyper-terminal or telnet (won't work via the web).

Use the following for password (any letters are capitalized) 13749:^IBC

[BillP]

Hi Young,

I will need the serial number of the unit to create a back door password. The serial number should be on the side of the unit. 

[Anonymous user]

Bill,

I have a similar situation to others, I have an older AP9210 that I need the password for.  

The serial number is WA9947017210, thanks for your help!

Kevin

[Anonymous user]

Bill,

Many thanks for your help, the recovery worked perfectly.

Thanks 

Rich

[BillP · Accepted solution]

Hi, I have the same problem with my AP9210. Can you generate a password for this one? The serial number is WA9818878103.

Thanks in advance,

Paul S.

[BillP]

1 - Use lower case apc for user name in either hyper-terminal or telnet (won't work via the web)

2 - Use the following for password 99;559^IBB

3 - You will then have to log in again but use lower case apc for both user name and password

[BillP]

I also have a AP9210 that has an unknown password. Could you make an unlock password for me too? My serial is WA9831002944. Thank you!

[BillP]

Hi,

1 - Use lower case apc for user name in either hyper-terminal or telnet (won't work via the web)

2 - Use the following for password 125=9:^IBB>= (any letters are capitalized) 

3 - You will then have to log in again but use lower case apc for both user name and password

[BillP]

That worked. You are my hero 😉

[BillP]

Bill thank you very much, that got me right in..

[Anonymous user]

I have the following, can you help me reset the password?

Model Number:           AP9631

Serial Number:          5A1218T03662

[BillP]

Hi,

The AP9631 is a network management card. This thread is for the AP9210 which is a Masterswitch.

You will find information on how to reset the user name and password on an AP9631 in the Schneider Electric FAQ FA156075 "Network Management Card (NMC) Password Reset Procedure"

[Anonymous user]

Hi, 

I just picked up AP9210 unit on Ebay and added it to my rack. I also got the serial connector and because I am aware that I would need to do a password rest. I am getting "Login: " as a prompt on my screen. 

I will assume that will need to have a specialized password generated for me to able to get this setup? Here is my Serial number WA9720842361

Can you provide me with some guidance on what do next. 

Thanks 

[BillP · Accepted solution]

Hi,

Log in using  lower case apc for user name in either hyper-terminal or telnet (won't work via the web)

use the following for password (any letters are capitalized)

9657;7^IBA=<

After entering the new password you will have to log in again but use lower case apc for both user name and password.

[BillP]

Hi, I have the same problem. I have an 2 old APC Powerswitch and I don't know the password. These are the AP9210I models and the serial number is: WA9824130354 and WA9824130350. Can you help me?

Best regards Standa

[ijhursh_apc]

Hi Bill,

I have 2-APC-9210's, I have tried eprom dump and cannot get in one info is below.

- Model Number : AP9210
2- Serial Number : WA9913001391
3- Hardware Revision : C4
4- Manufacture Date : 03/22/1999
5- MAC Address : 00 C0 B7 92 4C 38
6- Firmware Revision : v1.1.1
7- Outlet State (Hex) : 00
8- Receive Setup Packet
9- Transmit Setup Packet
10- Unit Self Test
11- Dump EEPROM
12- Flash Status Green
13- Flash Status Red
14- Turn Status OFF
15- Set IP Address : 192.168.7.210
16- Set Subnet Mask : 255.255.255.0
17- Set Default Gateway : 192.168.7.1
18- Reset PDU Controller
19- Start Factory Testing
20- End Factory Testing
21- International Type : A
22- Language Type : A

hopefully you are still there and can help me!

thx

Jim

[LeonChuang]

Hi Bill,

I need to have a AP9210 password recovery , as following...
Thanks for your help!
 1- Model Number : AP9210
2- Serial Number : WA9950003040
3- Hardware Revision : C4
4- Manufacture Date : 12/07/1999
5- MAC Address : 00 C0 B7 92 80 B7
6- Firmware Revision : v1.1.2
7- Outlet State (Hex) : FF
8- Receive Setup Packet
9- Transmit Setup Packet
10- Unit Self Test
11- Dump EEPROM
12- Flash Status Green
13- Flash Status Red
14- Turn Status OFF
15- Set IP Address : 61.63.32.97
16- Set Subnet Mask : 255.255.255.240
17- Set Default Gateway : 61.63.32.110
18- Reset PDU Controller
19- Start Factory Testing
20- End Factory Testing
21- International Type : A
22- Language Type : A

Thanks
Leon