CVE-2014-9198 Schneider Electric ETG3000 FactoryCast HMI Gateway Use of Hard-coded Credentials
HighCVSS 10.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric etg3000 factorycast hmi gateway firmware | <= 1.60.4 | No fix listed |
| schneider-electric tsxetg3000 | All versions | No fix listed |
| schneider-electric tsxetg3010 | All versions | No fix listed |
| schneider-electric tsxetg3021 | All versions | No fix listed |
| schneider-electric tsxetg3022 | All versions | No fix listed |
| Schneider Electric ETG3000 FactoryCast HMI Gateway | = TSXETG3000 | No fix listed |
| Schneider Electric ETG3000 FactoryCast HMI Gateway | = TSXETG3010 | No fix listed |
| Schneider Electric ETG3000 FactoryCast HMI Gateway | = TSXETG3021 | No fix listed |
| Schneider Electric ETG3000 FactoryCast HMI Gateway | = TSXETG3022 | No fix listed |
References
- www.cisa.gov
- 72258 vdb-entry
- 77765 vdb-entry
- ics-cert.us-cert.gov patch us-government-resource