Unrated severityNVD Advisory· Published Jan 27, 2015· Updated May 6, 2026

CVE-2014-9198

Description

The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

Affected products

Schneider Electric/Etg3000 Factorycast Hmi Gateway Firmware
cpe:2.3:o:schneider-electric:etg3000_factorycast_hmi_gateway_firmware:*:*:*:*:*:*:*:*
Range: <=1.60.4
Schneider Electric/Tsxetg3000
cpe:2.3:h:schneider-electric:tsxetg3000:-:*:*:*:*:*:*:*
Schneider Electric/Tsxetg3010
cpe:2.3:h:schneider-electric:tsxetg3010:-:*:*:*:*:*:*:*
Schneider Electric/Tsxetg3021
cpe:2.3:h:schneider-electric:tsxetg3021:-:*:*:*:*:*:*:*
Schneider Electric/Tsxetg3022
cpe:2.3:h:schneider-electric:tsxetg3022:-:*:*:*:*:*:*:*
Schneider Electric/ETG3000 FactoryCast HMI Gatewayv5
Range: TSXETG3000

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

ics-cert.us-cert.gov/advisories/ICSA-15-020-02nvdPatchUS Government Resource
www.securityfocus.com/bid/72258nvd
www.securityfocus.com/bid/77765nvd
www.cisa.gov/news-events/ics-advisories/icsa-15-020-02nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000