CVE-2015-7921

CRITICAL · 9.1 CVSS Gepubliceerd: 07-04-2016 CWE-255

Beschrijving

The FTP server in Pro-face GP-Pro EX EX-ED before 4.05.000, PFXEXEDV before 4.05.000, PFXEXEDLS before 4.05.000, and PFXEXGRPLS before 4.05.000 has hardcoded credentials, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of these credentials.

Vendors

Schneider-electric

Affected products

Proface Gp-pro Ex Ex-ed Proface Gp-pro Ex Pfxexedls Proface Gp-pro Ex Pfxexedv Proface Gp-pro Ex Pfxexgrpls

References

ics-cert.us-cert.gov