CVEvulnerability
CVE-2015-7921
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-04-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.
Affected configurations
• schneider-electric proface gp-pro ex ex-ed (<= 4.0.4)
• schneider-electric proface gp-pro ex pfxexedls (<= 4.0.4)
• schneider-electric proface gp-pro ex pfxexedv (<= 4.0.4)
• schneider-electric proface gp-pro ex pfxexgrpls (<= 4.0.4)
Related
Weakness · not in database (1)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01 Third Party Advisory, US Government Resource