CVEvulnerability

CVE-2014-9198

10.0 HIGH Published 2015-01-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-01-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-255, CWE-798

Description

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

Affected configurations

• schneider-electric etg3000 factorycast hmi gateway firmware (<= 1.60.4) • schneider-electric tsxetg3000 • schneider-electric tsxetg3010 • schneider-electric tsxetg3021 • schneider-electric tsxetg3022

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References