VULNERABILITY INTELLIGENCE

CVE-2014-9197

CVSS score7.8 HIGH
EPSS probability1.96%
CISA KEVNot currently listed
Published2015-01-27
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.

Weakness classification

  • CWE-284: Improper Access Control
  • CWE-306: Missing Authentication for Critical Function

Primary references