← Back to browse · API

CVE-2014-9198

Severity
CRITICAL
CVSS
10.0
EPSS
0.04193
Risk score
41.47
CISA KEV
No
PoC
No
Published
2015-01-27
Modified
2025-09-05
First seen
2026-08-07
Aliases
EUVD-2014-9023, GHSA-452F-C962-QPHR
Products
Schneider Electric:ETG3000 FactoryCast HMI Gateway TSXETG3000, Schneider Electric:ETG3000 FactoryCast HMI Gateway TSXETG3010, Schneider Electric:ETG3000 FactoryCast HMI Gateway TSXETG3021, Schneider Electric:ETG3000 FactoryCast HMI Gateway TSXETG3022
Sources
euvd EUVD-2014-9023

Description

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

References