Horner Automation OCS (XL4 / XL7 / XL14 Operator Control Station) — Default Password
Default username and password for the Horner Automation OCS (XL4 / XL7 / XL14 Operator Control Station): (blank) / (blank). Learn how to log in and how to change the default credentials.
Horner Automation XL4, XL7, and XL14 OCS (combined PLC/HMI units) include an integrated Ethernet port with an optional HTTP web server. Authentication is disabled by default — the web server is open and unauthenticated unless credentials are explicitly configured via Cscape software. CISA advisory ICSA-26-106-02 documents insufficient password controls on XL4 v16.32.0 and XL7 v15.60.
| Username | Password | Access | Notes |
|---|---|---|---|
(blank / none) | (blank / none) | Web UI | HTTP server is open by default; authentication must be explicitly enabled in Cscape |
- Source
- vendor documentation
Responsible use
This database lists publicly documented default credentials so administrators can find and change them. Only use these on systems you own or are authorized to test.