Hardcoded Credential Vulnerability in Schneider Electric HMI Gateway

CVE-2014-9198

What is CVE-2014-9198?

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway contains hardcoded credentials, which present a critical security risk. Attackers can exploit this vulnerability to gain unauthorized access to the system through an FTP session, potentially compromising sensitive data and system integrity. Users of firmware versions up to 1.60 IR 04 should take immediate steps to secure their systems against unauthorized access.

References