CVE-2014-9198

HIGH · 10.0 CVSS Gepubliceerd: 27-01-2015 CWE-798

Beschrijving

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

Vendors

Schneider-electric

Affected products

Etg3000 Factorycast Hmi Gateway Firmware Tsxetg3000 Tsxetg3010 Tsxetg3021 Tsxetg3022

References

www.cisa.gov
www.securityfocus.com
www.securityfocus.com
ics-cert.us-cert.gov