CVE-2014-9198
First published: Tue Jan 27 2015(Updated: )
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| ETG3000 FactoryCast HMI Gateway Firmware | <=1.60.4 | |
| Schneider-electric TSXETG3000 | ||
| Schneider Electric TSXETG3010 | ||
| Schneider Electric TSXETG3021 | ||
| Schneider Electric TSXETG3022 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-9198?
CVE-2014-9198 has a medium severity level due to the presence of hardcoded credentials that can be exploited by remote attackers.
How do I fix CVE-2014-9198?
To fix CVE-2014-9198, update the ETG3000 FactoryCast HMI Gateway firmware to a version after 1.60 IR 04 that corrects the hardcoded credential issue.
What systems are affected by CVE-2014-9198?
CVE-2014-9198 affects Schneider Electric ETG3000 FactoryCast HMI Gateways with firmware versions up to and including 1.60 IR 04.
What type of attack is possible with CVE-2014-9198?
CVE-2014-9198 allows remote attackers to gain unauthorized access via FTP sessions due to hardcoded credentials.
Are there any workarounds for CVE-2014-9198?
Currently, there are no effective workarounds for CVE-2014-9198 besides upgrading the firmware to prevent unauthorized FTP access.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/references
- agent/remedy
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/schneider-electric
- canonical/etg3000 factorycast hmi gateway firmware
- version/etg3000 factorycast hmi gateway firmware/1.60.4
- canonical/schneider-electric tsxetg3000
- canonical/schneider electric tsxetg3010
- canonical/schneider electric tsxetg3021
- canonical/schneider electric tsxetg3022