VULNERABILITY INTELLIGENCE
CVE-2014-9198
CVSS score10 HIGH
EPSS probability4.19%
CISA KEVNot currently listed
Published2015-01-27
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.
Weakness classification
- CWE-798: Use of Hard-coded Credentials
Primary references
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch, US Government Resource