NetSight
critical10.0

CVE-2014-9198

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for …

Impact

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

Affected products

VendorProductAffected versions
Schneider-ElectricEtg3000 Factorycast Hmi Gateway Firmware
through 1.60.4
Schneider-ElectricTsxetg3000
All versions
Schneider-ElectricTsxetg3010
All versions
Schneider-ElectricTsxetg3021
All versions
Schneider-ElectricTsxetg3022
All versions

Weakness classification

References