Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2014-9197

Schneider Electric ETG3000 FactoryCast HMI Gateway Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric ETG3000 FactoryCast HMI Gateway

Default version status: unaffected

  • TSXETG3000affected
  • TSXETG3010affected
  • TSXETG3021affected
  • TSXETG3022affected

References