Insufficient Access Control Vulnerability in Schneider Electric ETG3000 Gateway

CVE-2014-9197

What is CVE-2014-9197?

The Schneider Electric ETG3000 FactoryCast HMI Gateway is affected by an insufficient access control vulnerability that enables remote attackers to access sensitive configuration and setup information. This exposure occurs because the rde.jar file is stored under the web root without proper access restrictions. Attackers can exploit this flaw by making direct requests to the affected system, potentially compromising the security of the gateway.

References