Insufficient Access Control Vulnerability in Schneider Electric ETG3000 Gateway
CVE-2014-9197

Currently unrated

Key Information:

Vendor: Schneider Electric
Status: Etg3000 Factorycast Hmi Gateway
Vendor: CVE Published:; 27 January 2015

🔔 Create Schneider Electric Vulnerability Alert

What is CVE-2014-9197?

The Schneider Electric ETG3000 FactoryCast HMI Gateway is affected by an insufficient access control vulnerability that enables remote attackers to access sensitive configuration and setup information. This exposure occurs because the rde.jar file is stored under the web root without proper access restrictions. Attackers can exploit this flaw by making direct requests to the affected system, potentially compromising the security of the gateway.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch